Senior DFIR Lead - Incident Response & Digital Forensics

Lamoreaux Search LLC; Dublin; On-site; EUR 120,000 - 160,000; Full time

Job summary

Lamoreaux Search LLC in Dublin is seeking a Senior DFIR Analyst to lead investigations of high-impact cyber incidents, across endpoints, cloud, identity, and networks, acting as a senior technical authority within the Cyber Security organization.

You will develop threat-informed detections, mentor junior analysts, and partner with Security Operations, Threat Intelligence, and Legal teams to strengthen incident response capabilities across AWS, Azure, Google Cloud, SaaS and hybrid environments.

Qualifications

• 7+ years in cybersecurity with DFIR/IR/threat hunting
• Experience leading senior responders during major incidents
• Strong knowledge across endpoint, identity, network, cloud, and apps security
• Proficient with MITRE ATT&CK and modern adversary TTPs
• Scripting and automation using Python/PowerShell/APIs/SOAR

Responsibilities

• Lead investigations of complex, high-impact cyber incidents
• Conduct digital forensics across endpoints, servers, cloud, identities, apps and networks
• Perform root-cause analysis of attack vectors, persistence, lateral movement and exfiltration
• Develop threat-informed detections and proactive hunting activities
• Partner with Security Operations to improve detection, investigation, and response
• Mentor analysts and advance DFIR maturity across the organization
• Support investigations across AWS, Azure, Google Cloud, SaaS, and hybrid environments
• Develop playbooks, automation, metrics and process improvements

Skills

Incident response leadership

Senior technical responder

Threat hunting

Automation scripting

Education

GCIH

GCFA

CISSP

CISM

GCFE

GNFA

GCIA

OSCP

Tools

EDR

SIEM

SOAR

Forensic tools

Job description

Lamoreaux Search LLC in Dublin is seeking a Senior DFIR Analyst to lead investigations of high-impact cyber incidents, across endpoints, cloud, identity, and networks, acting as a senior technical authority within the Cyber Security organization.

You will develop threat-informed detections, mentor junior analysts, and partner with Security Operations, Threat Intelligence, and Legal teams to strengthen incident response capabilities across AWS, Azure, Google Cloud, SaaS and hybrid environments.