Senior DFIR Analyst

The Role

This position sits within a global cybersecurity function and focuses on investigating and responding to security incidents across a large enterprise environment. Day to day involves collecting and preserving digital evidence, analysing logs and artefacts from multiple security controls, and conducting structured forensic investigations across Windows, Linux, and Mac systems.

Skills & Experience

Candidates should bring solid incident response and digital forensics experience, including evidence handling and log interpretation. Familiarity with EDR tools, network traffic analysis, cloud logging sources, malware concepts, and open-source intelligence tools is valued. Entry-level or practitioner security certifications aligned to DFIR practice are desirable.

Who It Suits

This role suits an analytical and methodical security professional comfortable operating in complex, high-pressure enterprise environments. Someone with a structured investigative mindset, an interest in threat-led defence, and the discipline to work within formal procedures and contribute to their ongoing improvement will thrive here.