Senior Analyst, Digital Forensics & Incident Response (DFIR)r Analyst,

Lamoreaux Search LLC; Dublin; Sur place; EUR 120 000 - 160 000; Plein temps

Résumé du poste

Lamoreaux Search LLC in Dublin is seeking a Senior DFIR Analyst to lead investigations of high-impact cyber incidents, across endpoints, cloud, identity, and networks, acting as a senior technical authority within the Cyber Security organization.

You will develop threat-informed detections, mentor junior analysts, and partner with Security Operations, Threat Intelligence, and Legal teams to strengthen incident response capabilities across AWS, Azure, Google Cloud, SaaS and hybrid environments.

Qualifications

• 7+ years in cybersecurity with DFIR/IR/threat hunting
• Experience leading senior responders during major incidents
• Strong knowledge across endpoint, identity, network, cloud, and apps security
• Proficient with MITRE ATT&CK and modern adversary TTPs
• Scripting and automation using Python/PowerShell/APIs/SOAR

Responsabilités

• Lead investigations of complex, high-impact cyber incidents
• Conduct digital forensics across endpoints, servers, cloud, identities, apps and networks
• Perform root-cause analysis of attack vectors, persistence, lateral movement and exfiltration
• Develop threat-informed detections and proactive hunting activities
• Partner with Security Operations to improve detection, investigation, and response
• Mentor analysts and advance DFIR maturity across the organization
• Support investigations across AWS, Azure, Google Cloud, SaaS, and hybrid environments
• Develop playbooks, automation, metrics and process improvements

Connaissances

Incident response leadership

Senior technical responder

Threat hunting

Automation scripting

Formation

GCIH

GCFA

CISSP

CISM

GCFE

GNFA

GCIA

OSCP

Outils

EDR

SIEM

SOAR

Forensic tools

Description du poste

Are you a cybersecurity professional who thrives when the stakes are high? Our media and advertising client based in Dublin is seeking a Senior DFIR Analyst to join their Cyber Security organization and help lead the investigation, containment, eradication, and remediation of complex cyber incidents across a global enterprise.

In this role, you’ll serve as a senior technical authority during significant incidents while partnering across Security Operations, Threat Intelligence, Vulnerability Management, Offensive Security, Product Security, Technology, Legal, Privacy, and business leadership. Below is a summary of the role – not the full job description:

What you’ll do:

• Lead investigations of complex and high-impact cyber incidents
• Conduct digital forensics across endpoints, servers, cloud, identity, applications, and networks
• Perform root-cause analysis and investigate attack vectors, persistence, lateral movement, credential exposure, and data exfiltration
• Develop threat-informed detections and proactive threat-hunting activities
• Partner with Security Operations to improve detection, investigation, and response capabilities
• Help validate remediation and strengthen enterprise security controls
• Support investigations across AWS, Azure, Google Cloud, SaaS, and hybrid environments
• Develop playbooks, automation, metrics, and processes that continuously improve DFIR maturity
• Mentor analysts and help advance the organization’s investigative capabilities

What our client is seeking:

• 7+ years of cybersecurity experience, with significant DFIR, incident response, security operations, or threat-hunting experience
• Experience leading or serving as a senior technical responder during significant cyber incidents
• Strong expertise across endpoint, identity, network, cloud, and application security
• Advanced knowledge of EDR, SIEM, SOAR, identity, cloud, network security, and forensic technologies
• Experience investigating ransomware, credential compromise, lateral movement, persistence, privilege escalation, malware, and data exfiltration
• Strong knowledge of MITRE ATT&CK and modern adversary TTPs
• Experience with scripting and automation using Python, PowerShell, APIs, SOAR, or similar technologies
• Relevant certifications such as GCIH, GCFA, GCFE, GNFA, GCIA, CISSP, CISM, OSCP, or equivalent are preferred

The ideal candidate combines deep technical expertise, investigative judgment, incident leadership, solid communication skills, and a commitment to continuous improvement.

This role is not eligible for relocation assistance.

Please do NOT submit resumes that contain photos, protected data, or Personal Identifying Information beyond name, email address, and physical address. Your marital status, gender, ethnicity, birthdate, height, weight, and current salary is your business – NOT OURS!