Digital Forensics (DFIR) / Incident Response Analyst

The Role

This position involves hands-on daily incident management for enterprise customers, conducting forensic analysis of compromised systems, performing large-scale compromise assessments, and producing detailed incident reports. The analyst also builds IR plans and playbooks, creates tabletop training scenarios, and maintains sandbox environments for malware evaluation.

Skills & Experience

Candidates need 7+ years in cybersecurity with 2–5 years of Tier 3 incident response, strong experience in system compromise analysis, network vulnerability assessments, and familiarity with Magnet Axiom. Experience with enterprise security platforms, attack simulation, and on-call availability including weekend rotations is required.

Who It Suits

This role suits a seasoned DFIR professional comfortable operating independently across complex, global incidents and communicating technical findings clearly to customers. Those who enjoy a mix of hands-on forensics, advisory work, and team coordination in a fast-paced security consultancy environment will thrive here.