DFIR Investigator

The Role

This position sits within a global security services team and involves leading end-to-end digital forensics and incident response investigations across host, network and cloud environments. Day to day, investigators analyse threat actor behaviour, produce forensic reports and timelines, guide clients through the response lifecycle, and deliver proactive services such as tabletop exercises and training.

Skills & Experience

Candidates should bring proven hands-on experience leading complex DFIR investigations, with strong knowledge of forensic evidence collection, malware analysis, attack techniques and cloud environments. Experience deploying incident response tooling, producing client-ready reports, and mentoring junior investigators is expected. Relevant industry certifications would strengthen an application.

Who It Suits

This role suits an experienced DFIR professional who is comfortable leading investigations independently, communicating technical findings to varied stakeholders, and working under pressure during critical incidents. Those who enjoy combining deep technical work with client-facing engagement and team development will find this a particularly rewarding opportunity.