Lead Engineer – Digital Forensics & Incident Response (Cyber Security Office)

The Role

This position leads the investigation and management of cybersecurity incidents across cloud, on-premise, and hybrid environments. Day-to-day responsibilities include log analysis, threat containment, stakeholder coordination, report writing, post-incident reviews, and maintaining incident response playbooks, with rotational on-call duties included.

Skills & Experience

Candidates require at least eight years in DFIR and cloud security, holding a degree in Computer Science, Cybersecurity, or a related discipline. Proficiency with EDR, NDR, and SIEM platforms is essential, alongside hands-on experience with digital forensic acquisition tools and a solid understanding of network protocols and infrastructure.

Who It Suits

This role suits a seasoned DFIR professional comfortable leading incident response efforts in complex, multi-environment settings. Someone who communicates findings clearly to varied stakeholders, thrives under pressure, and is committed to protecting critical public-sector infrastructure will find this position particularly rewarding.