Senior DFIR Lead & Incident Response Consultant

Forensic Focus; Ireland; On-site; EUR 70,000 - 110,000; Full time

Job summary

Forensic Focus is seeking an experienced DFIR practitioner to lead incident response engagements in Ireland. The role combines hands-on forensic work with client communication and junior team coordination.

You will perform disk and memory acquisitions, IOC triage, log reviews and timeline construction, and present interim findings to clients across insurance, legal, and enterprise sectors. Travel to client sites is frequent.

Qualifications

• 3–5+ years in DFIR or related cybersecurity, with advanced forensic analysis capability.
• GCFA or GCFR certification strongly preferred.
• Scripting skills in Python or PowerShell.
• Endpoint forensics knowledge with EDR experience and SIEM/SOAR familiarity.

Responsibilities

• Leads discrete workstreams within active incident response engagements.
• Coordinates junior consultants and ensures deliverables meet quality standards.
• Forensic disk and memory acquisition, IOC triage, log review, and timeline construction.
• Present interim findings to clients across insurance, legal, and enterprise sectors.
• Frequent short‑notice travel to client sites.

Skills

DFIR experience

Python scripting

PowerShell scripting

Endpoint forensics

EDR (CrowdStrike Falcon)

SIEM/SOAR familiarity

Tools

CrowdStrike Falcon

Job description

Forensic Focus is seeking an experienced DFIR practitioner to lead incident response engagements in Ireland. The role combines hands-on forensic work with client communication and junior team coordination.

You will perform disk and memory acquisitions, IOC triage, log reviews and timeline construction, and present interim findings to clients across insurance, legal, and enterprise sectors. Travel to client sites is frequent.