Senior DFIR Lead — Forensics & Incident Response

Forensic Focus; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Forensic Focus seeks an experienced senior consultant to lead end-to-end forensic incident response engagements across mixed environments. You will handle evidence collection, analysis and reporting while interfacing with clients and supporting eDiscovery and investigations teams.

The role requires on-call availability, travel, and the ability to mentor junior staff, with strong communication to technical teams and senior stakeholders in crisis situations.

Qualifications

• Proven DFIR leadership experience in incident response engagements.
• Strong evidence handling practices aligned with NPCC/NIST/SANS.
• Scripting ability in PowerShell, Bash, Python and SQL; relevant certifications are advantageous.

Responsibilities

• Lead forensic incident response engagements end-to-end from collection to reporting.
• Engage with clients, contribute to proposals, and support eDiscovery and investigations teams.
• Maintain on-call availability and travel as required.

Skills

DFIR leadership

Evidence handling

PowerShell

Bash

Python

SQL

Client communication

Tools

EnCase

Nuix

Axiom

BlackBag

Job description

Forensic Focus seeks an experienced senior consultant to lead end-to-end forensic incident response engagements across mixed environments. You will handle evidence collection, analysis and reporting while interfacing with clients and supporting eDiscovery and investigations teams.

The role requires on-call availability, travel, and the ability to mentor junior staff, with strong communication to technical teams and senior stakeholders in crisis situations.