Senior Associate, Digital Forensics and Incident Response (DFIR)

The Role

This position involves leading and supporting cybersecurity investigations, including ransomware, data breaches, and insider threats. Day-to-day responsibilities include forensic imaging, malware examination, log analysis, and reconstructing attack timelines across endpoints, servers, cloud environments, and mobile devices, with findings documented to support litigation or regulatory proceedings.

Skills & Experience

Candidates should bring three to five years of digital forensics and incident response experience, gained in the public or private sector. Core competencies include forensic analysis, incident triage, evidence preservation, and data correlation. Familiarity with legal and regulatory standards governing digital evidence handling is expected.

Who It Suits

This role suits an experienced DFIR practitioner ready to take ownership of complex investigations within a specialist advisory environment. Those who thrive at the intersection of cybersecurity, intelligence, and litigation support, and who are comfortable engaging with multinational corporate clients and law firms, will find this a strong fit.