DFIR Lead: Incident Response & Digital Forensics

Trustwave; United Kingdom; Hybrid; GBP 60,000 - 100,000; Full time

Job summary

LevelBlue is seeking a Digital Forensics and Incident Response (DFIR) Specialist to join our global DFIR team. You will investigate and respond to cybersecurity incidents, performing forensic investigations and reporting with clarity for non-technical stakeholders.

Ideal candidates have deep DFIR experience, familiarity with NIST/SANS frameworks, and the ability to lead engagements from forensics to reporting while coordinating with cross-functional teams and clients in a fast-paced environment.

Qualifications

• Proven DFIR experience.
• Strong digital forensics toolset incl. X-Ways.
• Experience with NIST or SANS incident response frameworks.
• Excellent written and verbal communication.
• Ability to manage multiple projects and travel occasionally.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents.
• Conduct forensic investigations across devices, networks and SaaS platforms.
• Preserve and analyze digital evidence per legal/regulatory requirements.
• Prepare detailed incident reports for non-technical audiences.
• Collaborate with internal teams and external clients during engagements.

Skills

DFIR

Analytical skills

Communication

Independent work

Education

Bachelor's or Master's in Digital Forensics or Computer Science

Tools

X-Ways

Job description

LevelBlue is seeking a Digital Forensics and Incident Response (DFIR) Specialist to join our global DFIR team. You will investigate and respond to cybersecurity incidents, performing forensic investigations and reporting with clarity for non-technical stakeholders.

Ideal candidates have deep DFIR experience, familiarity with NIST/SANS frameworks, and the ability to lead engagements from forensics to reporting while coordinating with cross-functional teams and clients in a fast-paced environment.