Senior DFIR Investigator

The Role

This position involves leading complex digital forensic and incident response investigations across host, network and cloud environments. Day to day, the role includes analysing threat actor behaviour, producing forensic reports and timelines, guiding clients through incidents, and delivering proactive services such as tabletop exercises and training workshops.

Skills & Experience

Candidates require strong hands-on experience in DFIR, including forensic evidence collection and preservation, malware analysis and cloud investigation. Familiarity with incident response tooling is essential. The posting implies seniority and leadership capability, and experience producing clear, client-ready technical reports and recommendations is expected throughout engagements.

Who It Suits

This role suits an experienced DFIR professional who thrives in high-pressure, complex investigation environments and communicates confidently with diverse stakeholders. Those who enjoy mentoring junior colleagues, shaping client outcomes during critical incidents and staying current with evolving threat landscapes will find this position particularly rewarding.