This position involves leading and supporting digital forensic investigations across endpoint, network, cloud and enterprise environments. Responsibilities include incident triage, containment, forensic artefact collection, root-cause analysis and producing detailed investigation reports for clients experiencing security breaches, particularly Business Email Compromise cases.
Skills & Experience
Candidates need 2-3+ years of hands-on DFIR experience, including BEC investigations, phishing analysis, and forensic work across on-premise and cloud systems. Familiarity with EDR and SIEM platforms, operating systems, networking, and incident response methodologies is essential, along with solid client communication skills.
Who It Suits
Ideal for an experienced forensic investigator who enjoys technical casework combined with client interaction, including presenting findings to stakeholders and running incident response readiness exercises for varied organisations.