Senior DFIR Associate: Incident Response & Forensics

Kroll; United Kingdom; On-site; GBP 60,000 - 90,000; Full time

Job summary

Kroll is seeking a Senior Associate in Digital Forensics & Incident Response to lead complex investigations and deliver clarity to clients. You’ll work within a global team handling high-profile incidents and provide actionable, evidence-based guidance to senior stakeholders.

Ideal candidates have hands-on DFIR experience, strong communication skills, and the ability to translate data into practical remediation and reporting.

Qualifications

• 3+ years’ experience in incident response or digital forensics.
• Hands-on strength in malware analysis and security assessments.
• Strong communication and client-facing skills.

Responsibilities

• Lead investigations into ransomware, data breaches, and insider threats.
• Analyse forensic evidence across endpoints, networks, cloud, and systems.
• Translate findings into remediation plans for clients and senior stakeholders.
• Collaborate with legal, insurers and regulators; mentor junior consultants.

Skills

Incident response

Digital forensics

Malware analysis

Network security

Stakeholder management

Job description

Kroll is seeking a Senior Associate in Digital Forensics & Incident Response to lead complex investigations and deliver clarity to clients. You’ll work within a global team handling high-profile incidents and provide actionable, evidence-based guidance to senior stakeholders.

Ideal candidates have hands-on DFIR experience, strong communication skills, and the ability to translate data into practical remediation and reporting.