Digital Forensic Investigator (DFIR Specialist)

The Role

This position involves leading end-to-end cyber incident investigations for enterprise, government, and critical infrastructure clients, covering ransomware, data breaches, and insider threats. Day-to-day work includes forensic acquisition and analysis, attack timeline reconstruction, malware analysis, and producing court-admissible reports and executive briefings.

Skills & Experience

Candidates require at least five years of hands-on DFIR experience, with proficiency across endpoint, server, cloud, and network forensics. Familiarity with the MITRE ATT&CK framework is expected, along with the ability to identify compromise vectors, lateral movement, and persistence mechanisms within complex environments.

Who It Suits

This role suits a seasoned forensic investigator operating at senior or consultant level who is comfortable engaging directly with legal teams, executives, and regulators. Someone who thrives on complex, high-stakes investigations and wants to shape DFIR methodology within a growing, internationally active practice will find it rewarding.