Senior Analyst, Investigations and Forensics

The Role

The role centres on leading end-to-end digital forensic investigations across endpoint, cloud, SaaS, and identity platforms. Day-to-day work includes forensic acquisition and analysis, insider threat and misconduct casework, eDiscovery collections, log analysis in Chronicle and Splunk, and developing AI-assisted investigative workflows to support HR, legal, and executive stakeholders.

Skills & Experience

Candidates need 4+ years in digital forensics or cybersecurity investigations, with hands-on experience using Magnet AXIOM Cyber, Cellebrite Endpoint Investigator, and CrowdStrike Falcon EDR. Proficiency in YARA-L, SPL, Azure AD, Okta, and eDiscovery from O365 environments is required, alongside strong knowledge of forensic imaging standards such as ACPO and SWGDE.

Who It Suits

This contract role suits an experienced forensic practitioner comfortable operating independently on sensitive, high-stakes investigations in large enterprise environments. Those with a background in insider threat programmes, litigation support, or corporate investigations who want to shape AI-augmented forensic capability will find it particularly well matched.