Senior DFIR Specialist

The Role

This remote position involves leading hands-on digital forensics and incident response engagements across enterprise and regulated environments. Day to day, the specialist investigates active incidents, preserves and analyses evidence, and guides clients through containment, eradication, and recovery, while also helping to shape the methodologies and standards of a growing DFIR practice.

Skills & Experience

The role requires deep forensic tradecraft and proven experience handling sophisticated intrusions across complex environments, including critical infrastructure, defence, and financial services. Candidates should demonstrate strong operational decision-making under pressure and familiarity with the national security and regulated contexts in which modern incident response is frequently conducted.

Who It Suits

This position suits a senior DFIR practitioner who takes genuine pride in tracing adversary behaviour and establishing facts under pressure. It is particularly well suited to someone motivated by building something enduring from the ground up, comfortable operating both remotely and at client sites, and eager to define practice standards at a foundational level.