Senior DFIR Analyst

The Role

This position involves leading and supporting digital forensic investigations across endpoint, network, cloud and enterprise environments. Responsibilities include incident triage, containment, forensic artefact collection, root-cause analysis and producing detailed investigation reports for clients experiencing security breaches, particularly Business Email Compromise cases.

Skills & Experience

Candidates need 2-3+ years of hands-on DFIR experience, including BEC investigations, phishing analysis, and forensic work across on-premise and cloud systems. Familiarity with EDR and SIEM platforms, operating systems, networking, and incident response methodologies is essential, along with strong client communication skills.

Who It Suits

Ideal for an experienced forensic investigator who enjoys technical casework combined with client interaction, including presenting findings to stakeholders and running incident response readiness exercises for varied organisations.