About the role
Senior Associate, Digital Forensics & Incident Response When a cyber incident strikes, clients need clarity, speed and confidence. Kroll’s DFIR experts respond to more than 2,000 incidents each year, combining deep technical expertise with commercial judgement to help organisations contain threats, understand their impact and move forward decisively. As a Senior Associate, you’ll work on complex, high-profile investigations as part of a collaborative global team that delivers clarity when it matters most.
What You’ll Do
- Lead investigations into ransomware, data breaches, insider threats and business email compromise through containment, recovery and reporting.
- Analyse forensic evidence across endpoints, networks, cloud and enterprise systems.
- Translate findings into practical remediation and clear business decisions for clients and senior stakeholders.
- Work with legal counsel, insurers and regulators; prepare concise reports and mentor junior consultants.
What We’re Looking For You are technically strong, client-focused and calm under pressure, with the judgement to turn complex evidence into actionable advice.
- 3+ years’ experience in incident response, digital forensics, cyber investigations or a related field.
- Hands-on strength in incident response, forensics, malware analysis, network security or security assessments.
- Strong communication, stakeholder management and prioritisation skills; consulting experience and relevant certifications are advantageous.
Why Kroll
- Work on complex, high-profile incidents with recognised global DFIR experts.
- Build cross-industry experience through mentorship and continuous development.
- Help organisations respond to and recover from cyber crises.
No Agencies Please Ready to solve critical cyber challenges? We’d like to hear from you. Apply at careers.kroll.com .
Millions of jobs, with real people getting hired every day
Questions, answered
Click "Apply with JobAssist" – we tailor your resume and application to this role and submit it for your approval.
Yes. This role at Kroll was screened before publishing – we confirmed the employer before listing it.
The employer didn't disclose a salary range for this listing. JobAssist shows pay whenever it's available.
This position can be done from anywhere, with no in-office requirement.
Yes – every application is tailored from your profile and this job's requirements, and you can review and edit before it's sent.