Digital Forensics and Incident Response (DFIR) Specialist

Theos is seeking a Digital Forensics and Incident Response (DFIR) Specialist to lead client-facing engagements across the full incident response lifecycle, working closely with diverse customers and senior stakeholders to deliver critical outcomes and guide organisations through complex forensic investigations.

Requirements

• Lead end-to-end incident response engagements, guiding clients through investigation, containment, and long-term remediation.
• Conduct host-based forensic analysis across Windows, Linux, and Mac OS X systems to identify Indicators of Compromise (IOCs).
• Analyse firewall, web, database, and other log data to detect evidence of malicious activity and system compromise.
• Apply advanced tools (e.g., CrowdStrike, FTK, NGSIEM, Axiom) to investigate breaches, determine root cause, and assess scope of impact.
• Collaborate with clients and internal stakeholders to communicate findings, provide timely updates, and deliver comprehensive reports.
• Mentor junior staff, sharing expertise in incident response and digital forensics best practices.
• Travel as required (approximately 20%) to support client and business needs through on-site engagement.