Senior Incident Response & Digital Forensics Analyst

Berenice Photography; Greater London; Hybrid; GBP 58,000 - 90,000; Full time

Job summary

Bloomberg in London seeks a Senior Incident Response & Digital Forensics Analyst to lead end-to-end investigations, from acquiring forensic images to reconstructing attacker activity.

You will analyse memory and network evidence, reverse engineer binaries, mentor teammates, and help develop detection coverage and playbooks for the SOC. This onsite role reports to the Cyber Security Operations Center leadership and emphasizes OS internals, malware analysis and cloud forensics.

Qualifications

• Experience leading DFIR investigations with strong Windows and Linux forensics
• Proficiency with Splunk or comparable SIEM and scripting in Python
• Familiarity with Volatility, CrowdStrike Falcon, cloud forensics (AWS/Azure/GCP) and EDR tools like osquery or Carbon Black

Responsibilities

• Lead end-to-end security investigations and root-cause analysis
• Acquire and analyze forensic images, memory and network evidence
• Reverse-engineer suspicious binaries and reconstruct attacker activity
• Mentor teammates and contribute to tooling, playbooks and detection content
• Translate incident findings into improved detection coverage

Skills

IR leadership

Windows forensics

Linux forensics

Malware analysis

Python scripting

Splunk SIEM

Cloud forensics

EDR tools

Memory forensics

Network forensics

Education

Bachelor's degree in CS or related

Tools

Volatility

CrowdStrike Falcon

Zeek/Suricata

Osquery

Carbon Black

Job description

# Senior Incident Response & Digital Forensics Analyst*Bloomberg***London, England**Onsite · Senior · Full-time### The RoleBased within a global Cyber Security Operations Centre, this senior position leads end-to-end technical investigations into complex security incidents. Day-to-day work spans acquiring and analysing forensic images, examining memory and network evidence, reverse-engineering suspicious binaries, and reconstructing attacker activity to establish root cause and impact. The analyst also mentors teammates and contributes to tooling, playbooks, and detection development.### Skills & ExperienceCandidates must bring substantial hands-on incident response leadership, strong Windows and Linux disk and memory forensics, static and dynamic malware analysis, and deep OS internals knowledge. Proficiency with Splunk or comparable SIEM platforms is essential, as is scripting in Python or similar. Familiarity with Volatility, CrowdStrike Falcon, cloud forensics (AWS/Azure/GCP), EDR tools such as osquery or Carbon Black, and network monitoring tools like Zeek or Suricata is advantageous.### Who It SuitsThis role suits an experienced DFIR professional ready to take technical ownership of high-stakes investigations in a complex enterprise environment. Those with a drive to mentor others, build durable forensic processes, and translate incident findings into improved detection coverage will thrive here. Prior CSOC or consultancy backgrounds at senior level are well suited.Typical advertised salary forIncident Response roles in United Kingdom:**£58,000–£90,000**(median £70,000 — from33 recent listings analysed by Forensic Focus).Compare Incident Response salaries in United Kingdom →Learn More/Apply