Cybersecurity Lead Investigator

The Role

The lead investigator orchestrates end-to-end incident response engagements, setting investigation objectives, correlating disparate evidence and building cohesive timelines. They serve as the primary technical point of contact for customers — including executives, legal and compliance teams — while coordinating threat hunters, reverse engineers and infrastructure specialists across global follow-the-sun operations.

Skills & Experience

Candidates require deep technical expertise in enterprise on-premises and cloud environment investigations, adversary activity assessment, compromise scoping and data exfiltration analysis. Experience with Microsoft Defender technologies is advantageous. A relevant degree in Computer Science, Computer Security, Statistics or Mathematics forms the academic baseline, alongside substantial hands-on incident response experience.

Who It Suits

This role suits a seasoned incident responder who combines strong forensic analytical judgement with the communication skills to brief executive stakeholders under pressure. Those who enjoy mentoring colleagues, shaping team methodology and operating within a globally distributed, mission-driven security organisation will thrive here.