Senior DFIR Analyst

The Role

Working within a Security Operations Centre, this position centres on leading investigations into complex cyber security incidents, from phishing and malware through to endpoint compromise. The analyst collects and examines forensic evidence, coordinates incident containment and remediation, and contributes to improving detection and response capabilities across a large enterprise environment.

Skills & Experience

Candidates should demonstrate solid digital forensics fundamentals, including evidence preservation and analysis, alongside hands-on incident response experience across Windows, Linux, and macOS environments. Familiarity with EDR tooling, log analysis, network traffic examination, malware analysis concepts, and cloud security principles in hybrid environments is also highly valued.

Who It Suits

This role suits an experienced DFIR professional who thrives in a fast-paced, large-scale enterprise setting and is comfortable leading technically complex investigations. Someone who communicates clearly with cross-functional teams, brings analytical rigour under pressure, and is motivated by strengthening organisational cyber resilience will find this position particularly rewarding.