Senior DFIR Lead: Incident Response & Forensics (London)

Berenice Photography; Greater London; Hybrid; GBP 58,000 - 90,000; Full time

Job summary

Bloomberg in London seeks a Senior Incident Response & Digital Forensics Analyst to lead end-to-end investigations, from acquiring forensic images to reconstructing attacker activity.

You will analyse memory and network evidence, reverse engineer binaries, mentor teammates, and help develop detection coverage and playbooks for the SOC. This onsite role reports to the Cyber Security Operations Center leadership and emphasizes OS internals, malware analysis and cloud forensics.

Qualifications

• Experience leading DFIR investigations with strong Windows and Linux forensics
• Proficiency with Splunk or comparable SIEM and scripting in Python
• Familiarity with Volatility, CrowdStrike Falcon, cloud forensics (AWS/Azure/GCP) and EDR tools like osquery or Carbon Black

Responsibilities

• Lead end-to-end security investigations and root-cause analysis
• Acquire and analyze forensic images, memory and network evidence
• Reverse-engineer suspicious binaries and reconstruct attacker activity
• Mentor teammates and contribute to tooling, playbooks and detection content
• Translate incident findings into improved detection coverage

Skills

IR leadership

Windows forensics

Linux forensics

Malware analysis

Python scripting

Splunk SIEM

Cloud forensics

EDR tools

Memory forensics

Network forensics

Education

Bachelor's degree in CS or related

Tools

Volatility

CrowdStrike Falcon

Zeek/Suricata

Osquery

Carbon Black

Job description

Bloomberg in London seeks a Senior Incident Response & Digital Forensics Analyst to lead end-to-end investigations, from acquiring forensic images to reconstructing attacker activity.

You will analyse memory and network evidence, reverse engineer binaries, mentor teammates, and help develop detection coverage and playbooks for the SOC. This onsite role reports to the Cyber Security Operations Center leadership and emphasizes OS internals, malware analysis and cloud forensics.