- Poole, Dorset, United Kingdom
- Hybrid
- Full-time · Senior
Lead high-impact digital forensics and incident response (DFIR) engagements for clients facing challenging cyber threats like ransomware and BEC. The role acts as the senior technical lead throughout the incident lifecycle.
Responsibilities
- Lead end-to-end incident response engagements involving ransomware, BEC, and ClickFix attacks.
- Own forensic investigations across Windows environments, Active Directory, Microsoft 365, Azure, and endpoint platforms.
- Drive the production of executive-level and technical reports that clearly communicate root cause, attacker activity, and business impact.
- Advise clients on containment strategies, recovery planning, and security improvement actions during live incidents.
- Mentor and coach consultants and analysts, raising technical capability across the DFIR team.
Requirements
- Degree-level education in a relevant discipline or equivalent practical experience
- Nice to have: Google Workspace investigations
- Nice to have: NCSC CIR Enhanced organisation experience
- Nice to have: GCFA
- Nice to have: GCFE