Senior DFIR Investigator

Location: UK - London; hybrid workplace

Company

hirify.global provides in-house cyber expertise and cyber insurance solutions to help organisations respond to, recover from, and build resilience against cyber threats.

What you will do

• Lead forensic investigations across host, network, application, and cloud environments to determine incident root cause, scope, and impact.
• Analyse threat actor activity, attack techniques, malware, compromised systems, and potential data exposure.
• Deploy incident response tooling to collect, preserve, and analyse forensic evidence.
• Produce forensic reports, attack timelines, and actionable recommendations, presenting findings to technical and non-technical stakeholders.
• Provide technical guidance throughout the incident response lifecycle and collaborate with Cyber Claims, Underwriting, Security Services, legal, technology, and client stakeholders.
• Lead smaller investigation teams, mentor junior investigators, and deliver proactive services such as tabletop exercises, workshops, and client-facing training.

Requirements

• Significant digital forensics and incident response experience within enterprise environments.
• Expertise in host, network, and application forensics.
• Experience investigating complex cyber incidents from initial response through reporting and remediation.
• Strong understanding of threat actor tactics, techniques, and procedures (TTPs).
• Hands-on experience with forensic and incident response tooling.
• Experience with malware investigation and compromised system analysis.
• Knowledge of enterprise infrastructure, including networks, endpoints, and cloud environments.
• Experience producing client-facing reports and presenting findings to technical and non-technical audiences.
• Strong stakeholder management and communication skills, plus experience mentoring, coaching, or leading investigators.

Nice to have

• Knowledge of industry frameworks and standards, including NIST and ISO.
• Understanding of legal and regulatory considerations associated with cyber incidents.

Culture & Benefits

• Permanent, full-time employment within the Global Security Services team.
• Work on sophisticated cyber incidents and support organisations during critical moments.
• Collaborative environment involving cyber specialists and stakeholders across claims, underwriting, security, legal, technology, and client organisations.
• Culture focused on challenging existing approaches, welcoming different viewpoints, and improving how work is done.
• Team environment that combines serious insurance work with an emphasis on enjoyment and respectful collaboration.