Security Forensics Engineer

The Role

This position sits at the intersection of digital forensics, incident response and cyber investigations. Day to day, the engineer leads forensic examinations across cloud, endpoint, network and SaaS environments, performs root cause analysis on security incidents, analyses malware and phishing campaigns, and produces clear investigation reports for both technical and executive audiences.

Skills & Experience

Candidates should have hands-on experience in digital forensics or incident response, a solid grasp of forensic methodologies across Windows, Linux, macOS and cloud platforms, and familiarity with SIEM technologies, endpoint artefacts and log analysis. Knowledge of the MITRE ATT&CK framework and attacker TTPs is expected.

Who It Suits

This role suits a naturally curious investigator with a background in digital forensics, cyber investigations or security operations who thrives in fast-paced, complex environments. It is well suited to someone comfortable bridging technical investigation work with clear communication to non-technical stakeholders, including regulators and executives.