Digital Forensics and Incident Response (DFIR) analyst

Forensic Focus; Ireland; Hybrid; EUR 65,000 - 111,000; Full time

Job summary

Reinsurance Group of America, Incorporated is seeking a senior DFIR analyst to lead enterprise incident response and cyber crisis engagements from detection through recovery. You will investigate across Windows, Linux, macOS, M365, AWS, and Azure, performing threat hunting, containment strategy development, and executive reporting.

Ideal candidates have 5+ years in DFIR or security operations, with forensic tool experience (FTK, EnCase, X-Ways, Magnet AXIOM, SIFT) and proficiency in Splunk,

Qualifications

• 5+ years in DFIR or security operations.
• Must have experience with FTK, EnCase, X-Ways, Magnet AXIOM or SIFT.
• Proficiency with Splunk, CrowdStrike Falcon and Microsoft Defender.
• Certifications such as GCFA, GCFE, GCIH, CISSP or cloud security credentials are desirable.

Responsibilities

• Lead enterprise incident response and cyber crisis engagements from detection through recovery.
• Conduct host, network, cloud, and SaaS investigations across Windows, Linux, macOS, M365, AWS and Azure.
• Perform threat hunting and develop containment strategies.
• Produce executive and board-level reporting.

Skills

DFIR experience

Tools

FTK

EnCase

X-Ways

Magnet AXIOM

SIFT

Splunk

CrowdStrike Falcon

Microsoft Defender

Job description

# Digital Forensics and Incident Response (DFIR) analyst*Reinsurance Group of America, Incorporated***Ireland**Hybrid · Senior · Full-time### The RoleThe position leads enterprise incident response and cyber crisis engagements from detection through recovery, conducting host, network, cloud, and SaaS investigations across Windows, Linux, macOS, Microsoft 365, AWS, and Azure. Day-to-day duties include threat hunting, compromise assessments, containment strategy development, and producing executive and board-level reporting.### Skills & ExperienceCandidates need five or more years in DFIR or security operations, with mandatory experience in forensic tools such as FTK, EnCase, X-Ways, Magnet AXIOM, or SIFT. Proficiency with Splunk, CrowdStrike Falcon, and Microsoft Defender is required. Certifications such as GCFA, GCFE, GCIH, CISSP, or cloud security credentials are desirable.### Who It SuitsThis role suits an experienced DFIR professional comfortable leading major incidents involving ransomware, insider threats, or advanced persistent threats, who can equally engage technical responders and executive stakeholders. Those seeking a senior, globally scoped in-house position with hybrid or remote flexibility will find it appealing.Typical advertised salary forIncident Response roles in Ireland:**€65,000–€111,000**(median €84,000 — from10 recent listings analysed by Forensic Focus).Compare Incident Response salaries in Ireland →Certifications mentioned:GCFA · GCFE · GCIH · CISSP — find training for these on theDFIR Training Finder.Learn More/Apply