Lead complex digital forensics and incident response investigations involving ransomware, breaches, insider threats, and business email compromise. Analyze evidence across endpoints, networks, cloud, and enterprise systems; guide containment and recovery; translate findings into remediation advice and business decisions; collaborate with legal counsel, insurers, and regulators; prepare reports and mentor junior consultants.
Senior Associate, Digital Forensics & Incident Response
When a cyber incident strikes, clients need clarity, speed and confidence. Kroll’s DFIR experts respond to more than 2,000 incidents each year, combining deep technical expertise with commercial judgement to help organisations contain threats, understand their impact and move forward decisively. As a Senior Associate, you’ll work on complex, high-profile investigations as part of a collaborative global team that delivers clarity when it matters most.
What You’ll Do- Lead investigations into ransomware, data breaches, insider threats and business email compromise through containment, recovery and reporting.
- Analyse forensic evidence across endpoints, networks, cloud and enterprise systems.
- Translate findings into practical remediation and clear business decisions for clients and senior stakeholders.
- Work with legal counsel, insurers and regulators; prepare concise reports and mentor junior consultants.
You are technically strong, client-focused and calm under pressure, with the judgement to turn complex evidence into actionable advice.
- 3+ years’ experience in incident response, digital forensics, cyber investigations or a related field.
- Hands-on strength in incident response, forensics, malware analysis, network security or security assessments.
- Strong communication, stakeholder management and prioritisation skills; consulting experience and relevant certifications are advantageous.
- Work on complex, high-profile incidents with recognised global DFIR experts.
- Build cross-industry experience through mentorship and continuous development.
Help organisations respond to and recover from cyber crises.
No Agencies Please
Ready to solve critical cyber challenges? We’d like to hear from you.
Apply at careers.kroll.com.
#LI-TM1
#LI-Remote
Kroll London, England Office
London, United Kingdom
Similar Jobs
Cloud • Security • Software • Cybersecurity • Automation
Owns a portfolio of existing SMB customers, driving adoption, renewals, expansion revenue, and long-term account growth. Responsibilities include strategic account planning, business reviews, value-based selling, forecasting, pipeline management, churn analysis, and collaboration with Customer Success, Renewals, Product, and Sales Development teams. The role requires strong discovery, negotiation, executive communication, CRM proficiency, application lifecycle management knowledge, and willingness to learn GitLab and Git.
Top Skills:
6SenseClariCognismGitGitlabGongLinkedin Sales NavigatorOutreachSalesforceZoominfo
Cloud • Security • Software • Cybersecurity • Automation
Own an SMB territory focused on acquiring new customers and generating new logos through inbound and outbound sales. Manage the full consultative sales cycle, build pipeline, prospect strategically, develop business cases, collaborate with partners and cross-functional teams, and close opportunities. Maintain product and market knowledge, use modern sales technologies, apply MEDPICC and Command of the Message, share customer feedback, and achieve new-logo and booked-ARR targets.
Top Skills:
6SenseApplication Lifecycle ManagementClariCognismDevsecopsGitGitlabGongLinkedin Sales NavigatorOpen Source SoftwareOutreachSalesforceZoominfo
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Lead security incident response and digital forensic investigations, act as Incident Commander, monitor and analyze security events, build scripts and automated workflows (Python), use SIEM and cloud (AWS/GCP) tooling, mentor engineers, coordinate cross-team remediation, participate in on-call rota aligned to UK/EMEA hours.
Top Skills:
AWSGCPLinuxmacOSPythonSIEMWindows
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
