International Contract Bench, Incident Response (DFIR)

The Role

Contract investigators perform incident response and digital forensics across Windows, macOS and Linux environments, analysing forensic artefacts, conducting network analysis, and supporting cloud-native investigations on AWS, GCP and Azure. Assignments are flexible, requiring only a few hours per week, and span threats from ransomware to sophisticated nation-state activity.

Skills & Experience

Candidates must bring hands-on IR or SOC experience, strong knowledge of OS-level forensic artefacts, and familiarity with business email compromise and network analysis. Cloud investigation experience across AWS, GCP or Azure is valued, as is an applied understanding of threat intelligence and current adversary techniques.

Who It Suits

Experienced incident response consultants or forensic analysts seeking flexible contract engagement alongside existing commitments will thrive here. The model suits senior practitioners who want continued exposure to complex, high-impact investigations without the demands of a traditional full-time on-call position.