DFIR Lead

Established Consultancy firm with offices in the UK, US and Canada seeks a DFIR Lead.

This role offers the opportunity to be part of a global IR team that specialises in proactive Defence work to ensure the safeguarding of their client’s business operations and data.

In this role, you will embark on exciting work for the firm’s clients such as working on security breaches, insider threat and malware scenarios. You will have autonomy over the end-to-end IR cycle, from identifying IOCs, to incident escalation and managing the post-incident activities (lessons learned). Furthermore, part of this role will also be assisting with writing runbooks/playbooks and report writing for c-suite individuals. This position also requires being part of a 24/7 SOC delivery team responsible for handling incidents and driving resolutions.

To be considered for this role, you must have experience in leading on tabletop exercises, on prem and cloud DFIR investigation work, experience with the NIST framework, end to end IR, and the ability to deliver in-house mentorship and training.

Excellent communication skills are paramount for this role as you will be speaking to Senior individuals in the firm.

This role is remote.