Onsite Senior DFIR Lead — Digital Forensics

Forensic Focus Limited; Utrecht; Hybrid; EUR 53,000 - 68,000; Full time

Job summary

Forensic Focus Limited, based in Zeist/Netherlands, seeks a Lead Cyber Security Specialist in Digital Forensics to join a high‑security government defence environment onsite. You will lead complex DFIR investigations and incident response, guiding teams through containment, evidence collection, and recovery efforts.

You will analyse cyber incidents, develop hypothesis-driven threat hunting strategies, and communicate findings clearly to military and defence units.

Qualifications

• At least five years of cybersecurity and digital forensics experience.
• Deep knowledge of networks, malware analysis, and detection techniques.
• Proficiency in Python and PowerShell scripting.
• SANS or GIAC certifications required.
• Experience developing hypothesis-driven threat hunting strategies.

Responsibilities

• Lead and coordinate complex digital forensic investigations and incident response activities.
• Analyse cyber incidents and direct technical compromise investigations.
• Support recovery efforts and advise defence units on digital resilience.
• Communicate findings clearly to stakeholders at all levels.
• Lead a DFIR team in a high-security government environment.

Skills

Cybersecurity

Digital forensics

Threat hunting

Python

PowerShell

Malware analysis

Network security

Job description

Forensic Focus Limited, based in Zeist/Netherlands, seeks a Lead Cyber Security Specialist in Digital Forensics to join a high‑security government defence environment onsite. You will lead complex DFIR investigations and incident response, guiding teams through containment, evidence collection, and recovery efforts.

You will analyse cyber incidents, develop hypothesis-driven threat hunting strategies, and communicate findings clearly to military and defence units.