Senior DFIR Investigator & Incident Response Lead

Forensic Focus; Dublin; On-site; EUR 120,000 - 180,000; Full time

Job summary

Forensic Focus in Ireland seeks an experienced incident responder and forensic investigator to lead investigations into complex, high-impact cyber incidents across endpoints, servers, cloud platforms, identity systems and networks. You will determine root causes, trace attacker activity, and work with security, legal and business teams to contain and remediate threats.

The role also involves mentoring junior analysts and driving continuous improvement in investigative processes across a global

Qualifications

• 7+ years in cybersecurity with strong DFIR, incident response, or threat-hunting backgrounds.
• Expertise with EDR, SIEM, SOAR and cloud platforms (AWS, Azure, GCP).
• Certifications like GCIH, GCFA, GCFE, GNFA, GCIA, CISSP, or OSCP are preferred.

Responsibilities

• Lead investigations into complex, high-impact cyber incidents across endpoints, servers, cloud platforms, identity systems and networks.
• Determine root causes, trace attacker activity, and coordinate containment and remediation with security, legal and business teams.

Skills

DFIR

Incident response

Threat hunting

Python

PowerShell

Tools

EDR

SIEM

SOAR

AWS

Azure

GCP

MITRE ATT&CK

Job description

Forensic Focus in Ireland seeks an experienced incident responder and forensic investigator to lead investigations into complex, high-impact cyber incidents across endpoints, servers, cloud platforms, identity systems and networks. You will determine root causes, trace attacker activity, and work with security, legal and business teams to contain and remediate threats.

The role also involves mentoring junior analysts and driving continuous improvement in investigative processes across a global