CFC

Cyber risk underwriting through MGA platform

Senior Digital Forensics and Incident Response Investigator

Security Operations & Incident ResponseUpdated on Nov 13

Full-timeLondon, UKNo salary listedHybrid

About the Job

Requirements

Significant experience in digital forensics and incident response within enterprise environments.
Expertise across host, network, and application forensics.
Experience investigating complex cyber incidents from initial response through reporting and remediation.
Strong understanding of threat actor tactics, techniques, and procedures.
Hands-on experience with forensic and incident response tooling.
Familiarity with malware investigation and compromised system analysis.
Knowledge of enterprise infrastructure, including networks, endpoints, and cloud environments.
Experience producing client-facing reports and presenting findings to technical and non-technical audiences.
Experience mentoring, coaching, or leading other investigators.

Responsibilities

Lead forensic investigations across host, network, and cloud environments to identify the root cause, scope, and impact of cyber incidents.
Analyse threat actor activity, attack techniques, malware, and potential data exposure.
Produce forensic reports, attack timelines, and actionable recommendations for clients.
Deploy and use incident response tooling to collect, preserve, and analyse forensic evidence.
Provide technical guidance to clients throughout the incident response lifecycle.
Work with internal teams, including Cyber Claims, Underwriting, and Security Services, and with external legal, technology, and client stakeholders.
Lead smaller investigation teams and support the delivery of incident response engagements.
Mentor and develop junior investigators, contributing to the growth of the team.
Deliver proactive cyber services, including tabletop exercises, workshops, and client-facing training.
Maintain expertise across emerging threats, attack techniques, and industry best practice.

Desired Qualifications

Knowledge of industry frameworks and standards, including NIST and ISO.
Understanding of legal and regulatory considerations associated with cyber incidents.

At CFC, cyber sits at the core of our business. Through our in-house cyber expertise and market-leading insurance solutions, we help organisations respond to, recover from and build resilience against cyber threats.

We're seeking a Senior DFIR Investigator to join our Global Security Services team. Working at the forefront of incident response, you'll lead complex investigations for organisations around the world, helping clients understand what happened, contain threats and recover with confidence.

This role offers the opportunity to work on sophisticated cyber incidents, collaborate with a broad range of stakeholders, and play a key role in shaping outcomes for clients during critical moments.

Lead forensic investigations across host, network and cloud environments to identify root cause, scope and impact of cyber incidents.
Analyse threat actor activity, attack techniques, malware and potential data exposure.
Produce high-quality forensic reports, attack timelines and actionable recommendations for clients.
Deploy and utilise incident response tooling to collect, preserve and analyse forensic evidence.
Provide trusted technical guidance to clients throughout the incident response lifecycle.
Work closely with internal teams including Cyber Claims, Underwriting and Security Services, as well as external legal, technology and client stakeholders.
Lead smaller investigation teams and support the successful delivery of incident response engagements.
Mentor and develop junior investigators, contributing to the continued growth of the team.
Deliver proactive cyber services, including tabletop exercises, workshops and client-facing training.
Maintain expertise across emerging threats, attack techniques and industry best practice.

You'll be an experienced DFIR professional with a strong technical background and a track record of leading investigations in complex environments. You are comfortable operating in high-pressure situations, communicating clearly with a range of stakeholders, and translating technical findings into meaningful business outcomes.

You'll ideally bring:

Significant experience in digital forensics and incident response within enterprise environments.
Expertise across host, network and application forensics.
Experience investigating complex cyber incidents from initial response through to reporting and remediation.
Strong understanding of threat actor tactics, techniques and procedures (TTPs).
Hands-on experience with forensic and incident response tooling.
Familiarity with malware investigation and compromised system analysis.
Knowledge of enterprise infrastructure, including networks, endpoints and cloud environments.
Experience producing client-facing reports and presenting findings to both technical and non-technical audiences.
Strong stakeholder management and communication skills.
Experience mentoring, coaching or leading other investigators.

Knowledge of industry frameworks and standards, including NIST and ISO, alongside an understanding of legal and regulatory considerations associated with cyber incidents, would be advantageous.

At CFC, you'll join a team of cyber specialists focused on delivering market-leading expertise, supporting clients through some of their most challenging moments, and helping organisations build greater cyber resilience.

About the Company

CFC

Cyber risk underwriting through MGA platform

CFC Underwriting is a specialist insurance provider operating as a managing general agent (MGA) that underwrites on behalf of a panel of carriers, focusing on emerging and specialty risks with a strong emphasis on cyber. It uses a proprietary global insurance platform powered by data science to streamline underwriting across a portfolio of 50+ products, including cyber and professional liability, with an in-house incident response team adding comprehensive cyber risk management. It differentiates itself through its early focus on cyber, large in-house claims and incident response capabilities, and a global broker-driven distribution model. Its goal is to deliver fast, precise underwriting and robust risk management for technology-related and other specialty risks worldwide.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: London, United Kingdom
Founded: 1999

Recently Posted Jobs

Explore more opportunities at CFC

See more jobs