Senior Investigator Digital Forensics, Incident Response (DFIR)

The Role

This senior position involves leading complex digital forensics and incident response investigations across cloud, OT, and enterprise environments. Day-to-day work includes memory forensics, malware triage, threat hunting, log analysis, and building attack timelines, while mentoring junior investigators and supporting strategic technical decision-making on active engagements.

Skills & Experience

Candidates should bring deep expertise in host and network forensics, EDR tooling, and cloud platforms including AWS, Azure, and GCP. Proficiency in scripting and automation, anti-forensics detection, and indicator-of-compromise development is expected, alongside strong familiarity with attacker tactics, techniques, and procedures across diverse threat scenarios.

Who It Suits

This role suits an experienced DFIR professional who thrives under pressure, takes ownership of investigations, and communicates findings confidently to both technical teams and executive stakeholders. Those who enjoy mentoring others, driving process improvement, and operating at the leading edge of incident response will find this position compelling.