Senior Analyst, Digital Forensics & Incident Response (DFIR)

Are you a cybersecurity professional who thrives when the stakes are high? Our media and advertising client based in Dublin is seeking a Senior DFIR Analyst to join their Cyber Security organization and help lead the investigation, containment, eradication, and remediation of complex cyber incidents across a global enterprise.In this role, you’ll serve as a senior technical authority during significant incidents while partnering across Security Operations, Threat Intelligence, Vulnerability Management, Offensive Security, Product Security, Technology, Legal, Privacy, and business leadership. Below is a summary of the role – not the full job description:What you’ll do:

• Lead investigations of complex and high-impact cyber incidents
• Conduct digital forensics across endpoints, servers, cloud, identity, applications, and networks
• Perform root-cause analysis and investigate attack vectors, persistence, lateral movement, credential exposure, and data exfiltration
• Develop threat-informed detections and proactive threat-hunting activities
• Partner with Security Operations to improve detection, investigation, and response capabilities
• Help validate remediation and strengthen enterprise security controls
• Support investigations across AWS, Azure, Google Cloud, SaaS, and hybrid environments
• Develop playbooks, automation, metrics, and processes that continuously improve DFIR maturity
• Mentor analysts and help advance the organization’s investigative capabilitiesWhat our client is seeking:
• 7+ years of cybersecurity experience, with significant DFIR, incident response, security operations, or threat-hunting experience
• Experience leading or serving as a senior technical responder during significant cyber incidents
• Strong expertise across endpoint, identity, network, cloud, and application security
• Advanced knowledge of EDR, SIEM, SOAR, identity, cloud, network security, and forensic technologies
• Experience investigating ransomware, credential compromise, lateral movement, persistence, privilege escalation, malware, and data exfiltration
• Strong knowledge of MITRE ATT&CK and modern adversary TTPs
• Experience with scripting and automation using Python, PowerShell, APIs, SOAR, or similar technologies
• Relevant certifications such as GCIH, GCFA, GCFE, GNFA, GCIA, CISSP, CISM, OSCP, or equivalent are preferredThe ideal candidate combines deep technical expertise, investigative judgment, incident leadership, solid communication skills, and a commitment to continuous improvement.This role is not eligible for relocation assistance.Please do NOT submit resumes that contain photos, protected data, or Personal Identifying Information beyond name, email address, and physical address. Your marital status, gender, ethnicity, birthdate, height, weight, and current salary is your business – NOT OURS!