Associate Director, Incident Response and Forensics

The Role

This senior leadership position oversees a global team of digital forensics, incident response, and eDiscovery analysts. Day to day, the role involves directing forensic investigations, guiding incident handling across the full response lifecycle, driving tool adoption, and collaborating closely with Security Operations, Threat Intelligence, and legal stakeholders.

Skills & Experience

Candidates require strong expertise in digital forensics, malware analysis, network traffic analysis, and threat hunting using adversary TTPs. Experience deriving Indicators of Compromise, conducting multi-platform forensic examinations, and building team capability maturity programmes is essential. Familiarity with eDiscovery processes and cross-functional engagement with legal and compliance teams is expected.

Who It Suits

This role suits an experienced DFIR professional ready to step into a strategic leadership position, someone equally comfortable conducting hands-on technical work and owning programme direction. It appeals to those who thrive in fast-moving environments and want to shape the people, processes, and technology of a global security function.