Senior DFIR Investigator

Key Responsibilities

• Lead forensic investigations across host, network and cloud environments to identify root cause, scope and impact of cyber incidents.
• Analyse threat actor activity, attack techniques, malware and potential data exposure.
• Produce high-quality forensic reports, attack timelines and actionable recommendations for clients.
• Deploy and utilise incident response tooling to collect, preserve and analyse forensic evidence.
• Provide trusted technical guidance to clients throughout the incident response lifecycle.
• Work closely with internal teams including Cyber Claims, Underwriting and Security Services, as well as external legal, technology and client stakeholders.
• Lead smaller investigation teams and support the successful delivery of incident response engagements.
• Mentor and develop junior investigators, contributing to the continued growth of the team.
• Deliver proactive cyber services, including tabletop exercises, workshops and client-facing training.
• Maintain expertise across emerging threats, attack techniques and industry best practice.

Skills, Knowledge and Expertise

• Significant experience in digital forensics and incident response within enterprise environments.
• Expertise across host, network and application forensics.
• Experience investigating complex cyber incidents from initial response through to reporting and remediation.
• Strong understanding of threat actor tactics, techniques and procedures (TTPs).
• Hands-on experience with forensic and incident response tooling.
• Familiarity with malware investigation and compromised system analysis.
• Knowledge of enterprise infrastructure, including networks, endpoints and cloud environments.
• Experience producing client-facing reports and presenting findings to both technical and non-technical audiences.
• Strong stakeholder management and communication skills.
• Experience mentoring, coaching or leading other investigators.

Core Values

About
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1100 staff and is trusted by more than 100,000 businesses across 90 countries.At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.