Digital Forensics and Incident Response Specialist

The Role

This position leads end-to-end security incident response, from initial detection and triage through containment, eradication, and recovery. Day to day, it involves conducting digital forensic investigations, maintaining case documentation, developing response playbooks, and supporting proactive threat hunting across systems, networks, and cloud environments.

Skills & Experience

Candidates need at least three years in incident response or digital forensics, alongside certifications such as GCFA or GCIH. Hands-on experience with forensic tools, SIEM, EDR solutions, and log aggregation is expected, as is familiarity with Windows, Linux, cloud environments, and frameworks including NIST, SANS, and MITRE ATT&CK.

Who It Suits

This role suits a methodical, technically grounded cybersecurity professional who thrives under pressure and communicates findings clearly to both technical and non-technical audiences. Someone who takes ownership of investigations from evidence acquisition through to reporting will find this a well-structured and purposeful position.