Senior DFIR & Incident Response Analyst (Remote UK)

Arctic Wolf Networks UK LTD; United Kingdom; Remote; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Equity for all employees

28 days annual leave + holidays

Pension plan employer match

Training and career development

Robust EAP and private benefits

Fertility support and parental leave

Community & volunteering days

Job summary

Arctic Wolf is seeking a Senior Incident Response Forensics Analyst to join our DFIR team. The role focuses on forensic investigations of AD intrusions, BEC events, and related incidents, with opportunities to mentor junior analysts and contribute to advanced IR initiatives.

Based in the UK and offered as a remote position, you will work on Windows/Linux/Mac forensics, cloud data acquisition, and threat containment across global clients, while staying current with evolving TTPs and industry

Qualifications

• Three or more years in digital forensics and incident response or related cybersecurity roles.
• Ability to respond to inquiries and work beyond normal hours.
• Advanced knowledge of host-based forensics, network analysis, and data breach response.
• Knowledge of current attack vectors and trends in cybersecurity.
• Ability to identify IOC from new exploits with limited documentation.
• Experience with IR/forensic tools and SIEM platforms.

Responsibilities

• Conduct forensic investigations for incidents from targeted threats or commodity threats.
• Perform host and network forensics on Windows, Linux, and Mac OS.
• Analyze cloud environments (Azure, AWS, GCP) for forensic data.
• Contain and eradicate threats using appropriate tooling.
• Provide tactical recommendations for compromised clients.
• Communicate findings to executives and legal counsel.
• Lead case scope and update calls; mentor junior analysts.

Skills

Digital forensics

Incident response

Host analysis

Network analysis

Threat hunting

Mentor juniors

Communication skills

On-call readiness

Education

Bachelor’s Degree in Information Security

GCFA/GCFE/ACE/EnCE

Tools

Magnet Axiom

EnCase

FTK

X-Ways

SIFT

Job description

Arctic Wolf is seeking a Senior Incident Response Forensics Analyst to join our DFIR team. The role focuses on forensic investigations of AD intrusions, BEC events, and related incidents, with opportunities to mentor junior analysts and contribute to advanced IR initiatives.

Based in the UK and offered as a remote position, you will work on Windows/Linux/Mac forensics, cloud data acquisition, and threat containment across global clients, while staying current with evolving TTPs and industry