Lead and execute complex DFIR investigations across host, network and cloud environments; analyse threat actor activity and malware; produce forensic reports and timelines; provide technical guidance to clients; lead small teams, mentor junior investigators; deliver tabletop exercises and training; maintain threat landscape expertise.
At CFC, cyber sits at the core of our business. Through our in-house cyber expertise and market-leading insurance solutions, we help organisations respond to, recover from and build resilience against cyber threats.
We're seeking a Senior DFIR Investigator to join our Global Security Services team. Working at the forefront of incident response, you'll lead complex investigations for organisations around the world, helping clients understand what happened, contain threats and recover with confidence.
We're seeking a Senior DFIR Investigator to join our Global Security Services team. Working at the forefront of incident response, you'll lead complex investigations for organisations around the world, helping clients understand what happened, contain threats and recover with confidence.
This role offers the opportunity to work on sophisticated cyber incidents, collaborate with a broad range of stakeholders, and play a key role in shaping outcomes for clients during critical moments.
Key Responsibilities
- Lead forensic investigations across host, network and cloud environments to identify root cause, scope and impact of cyber incidents.
- Analyse threat actor activity, attack techniques, malware and potential data exposure.
- Produce high-quality forensic reports, attack timelines and actionable recommendations for clients.
- Deploy and utilise incident response tooling to collect, preserve and analyse forensic evidence.
- Provide trusted technical guidance to clients throughout the incident response lifecycle.
- Work closely with internal teams including Cyber Claims, Underwriting and Security Services, as well as external legal, technology and client stakeholders.
- Lead smaller investigation teams and support the successful delivery of incident response engagements.
- Mentor and develop junior investigators, contributing to the continued growth of the team.
- Deliver proactive cyber services, including tabletop exercises, workshops and client-facing training.
- Maintain expertise across emerging threats, attack techniques and industry best practice.
Skills, Knowledge and Expertise
You'll be an experienced DFIR professional with a strong technical background and a track record of leading investigations in complex environments. You are comfortable operating in high-pressure situations, communicating clearly with a range of stakeholders, and translating technical findings into meaningful business outcomes.
You'll ideally bring:
You'll ideally bring:
- Significant experience in digital forensics and incident response within enterprise environments.
- Expertise across host, network and application forensics.
- Experience investigating complex cyber incidents from initial response through to reporting and remediation.
- Strong understanding of threat actor tactics, techniques and procedures (TTPs).
- Hands-on experience with forensic and incident response tooling.
- Familiarity with malware investigation and compromised system analysis.
- Knowledge of enterprise infrastructure, including networks, endpoints and cloud environments.
- Experience producing client-facing reports and presenting findings to both technical and non-technical audiences.
- Strong stakeholder management and communication skills.
- Experience mentoring, coaching or leading other investigators.
Knowledge of industry frameworks and standards, including NIST and ISO, alongside an understanding of legal and regulatory considerations associated with cyber incidents, would be advantageous.
At CFC, you'll join a team of cyber specialists focused on delivering market-leading expertise, supporting clients through some of their most challenging moments, and helping organisations build greater cyber resilience.
Core Values
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
About
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1200 staff and is trusted by more than 100,000 businesses across 90 countries.At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.Feeling like you need to tick every box before applying? We see things differently. In a rapidly scaling company like ours, ambition and the drive to learn count for more than a 'perfect' checklist. We're building the future of insurance, and that requires diverse talent eager to grow with us. If this role excites you and you're ready to make a significant impact, bring your unique background and let's build something great together.
CFC London, England Office
London, United Kingdom
Similar Jobs
Insurance • Cybersecurity
Lead complex digital forensics and incident response investigations across host, network, application, and cloud environments. Analyze threat actors, malware, attack techniques, and data exposure; produce forensic reports and timelines; guide clients through containment and recovery; and provide technical recommendations. Lead investigation teams, mentor junior investigators, collaborate with legal and business stakeholders, and deliver proactive services including tabletop exercises, workshops, and client training.
Top Skills:
Application ForensicsCloud EnvironmentsDigital Forensics And Incident Response (Dfir)Host ForensicsIsoMalware AnalysisNetwork ForensicsNist
.png){kind=logo}
AdTech • eCommerce • Information Technology • Software • Travel • Generative AI
Designs, develops, tests, and maintains scalable software features and services for Expedia Group’s B2B Credit platform. The role involves Java/Kotlin development, RESTful APIs, microservices, cloud platforms, architectural collaboration, production troubleshooting, code review, and improving engineering practices. The engineer partners with product, design, and cross-functional teams to deliver reliable travel technology solutions.
Top Skills:
AWSAzureCi/CdDevOpsDockerGCPJavaKotlinKubernetesMicroservicesRestful Apis
Artificial Intelligence • Software
Provide high-level administrative support to a portfolio of individuals/teams: manage complex calendars, book domestic and international travel, process expenses, coordinate events, and collaborate with internal and external stakeholders to optimize leader productivity.
Top Skills:
ExcelExpense Reporting SoftwareOutlookPowerPointTravel Booking SoftwareWord
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
