Senior DFIR Associate — Incident Response & Forensics

Kroll; United Kingdom; Remote; GBP 60,000 - 90,000; Full time

Job summary

Kroll is seeking a Senior Associate for Digital Forensics and Incident Response in the United Kingdom. The role focuses on leading investigations into ransomware, data breaches, and insider threats, analysing forensic evidence across endpoints, networks, and cloud, and translating findings into actionable remediation for clients and senior stakeholders.

You will collaborate with legal counsel, insurers and regulators, preparing clear reports and mentoring junior consultants within a global DFIR

Qualifications

• 3+ years’ experience in incident response, digital forensics, cyber investigations or a related field.
• Hands-on strength in incident response, forensics, malware analysis, network security or security assessments.
• Strong communication, stakeholder management and prioritisation skills; consulting experience and relevant certifications are advantageous.

Responsibilities

• Lead investigations into ransomware, data breaches, insider threats and business email compromise through containment, recovery and reporting.
• Analyse forensic evidence across endpoints, networks, cloud and enterprise systems.
• Translate findings into practical remediation and clear business decisions for clients and senior stakeholders.
• Work with legal counsel, insurers and regulators; prepare concise reports and mentor junior consultants.

Skills

Incident response

Digital forensics

Cyber investigations

Malware analysis

Network security

Job description

Kroll is seeking a Senior Associate for Digital Forensics and Incident Response in the United Kingdom. The role focuses on leading investigations into ransomware, data breaches, and insider threats, analysing forensic evidence across endpoints, networks, and cloud, and translating findings into actionable remediation for clients and senior stakeholders.

You will collaborate with legal counsel, insurers and regulators, preparing clear reports and mentoring junior consultants within a global DFIR