Senior Analyst – Forensics & Response

The Role

This senior position sits within a Threat Detection and Response team focused on insider risk. Day-to-day responsibilities include conducting digital forensic investigations across endpoints, servers, mobile devices, and cloud infrastructure; acquiring and preserving evidence under strict chain-of-custody protocols; analysing file system artefacts, memory dumps, and network traffic; and producing executive-ready forensic reports with root cause analysis and remediation recommendations.

Skills & Experience

Candidates need 3+ years in DFIR or cybersecurity, with strong knowledge of Windows, Linux, and macOS file systems (NTFS, EXT4, APFS). Desirable skills include SQL-based data analytics, Python/Bash/PowerShell scripting, cloud platform experience (AWS, Azure, GCP, OCI), and malware analysis. Relevant certifications include GCFA, GCFE, GCIH, GREM, or equivalent GIAC credentials.

Who It Suits

This role suits an experienced DFIR professional comfortable operating in a highly regulated, compliance-driven environment and handling high-stakes insider threat investigations. Those with a background bridging technical forensics and legal support — including eDiscovery and law enforcement liaison — will find the scope particularly well matched to their skills.