Senior Digital Forensics and Incident Response Analyst

The Role

This position sits within a Security Operations Centre, focusing on leading investigations into complex cyber security incidents. Day to day, the analyst collects and examines forensic evidence, responds to threats such as malware, phishing and endpoint compromise, and collaborates with infrastructure and cyber security teams to contain, remediate and improve detection capabilities.

Skills & Experience

Candidates need proven experience in digital forensics and incident response within large enterprise environments, including evidence collection, log analysis and artefact interpretation across Windows, Linux and macOS. Familiarity with EDR technologies, network traffic analysis, malware analysis concepts and cloud security principles is considered advantageous.

Who It Suits

This role suits an experienced DFIR professional who thrives in high-pressure, complex environments and is comfortable leading technical investigations independently. Someone who enjoys cross-functional collaboration, takes a structured approach to evidence handling, and is motivated by continuously strengthening an organisation’s cyber resilience will find this role rewarding.