International Digital Forensics and Incident Response (DFIR) Expert

The Role

This position involves leading and supporting end-to-end cyber incident response engagements for international clients, spanning triage, forensic investigation, recovery, and lessons learned. Day-to-day work includes examining endpoints, cloud platforms and enterprise systems, producing technical reports, and collaborating with security, legal, and leadership teams during live incidents.

Skills & Experience

Candidates should bring proven expertise in digital forensics and incident response across endpoints, servers, and cloud environments. Experience developing playbooks, conducting tabletop exercises, and performing root cause analysis is essential. Familiarity with threat hunting and detection improvement is expected, and relevant certifications such as GCFE, GCFA, or GCIH are highly desirable.

Who It Suits

This role suits a seasoned DFIR practitioner who performs well under pressure and is comfortable engaging with both technical teams and senior client stakeholders. Those with a background in international or consultancy-based engagements, and a drive to improve organisational cyber resilience beyond individual incidents, will find this particularly rewarding.