Senior Associate, Incident Response

Senior Associate, Digital Forensics & Incident Response

When a cyber incident strikes, clients need clarity, speed and confidence. Kroll's DFIR experts respond to more than 2,000 incidents each year, combining deep technical expertise with commercial judgement to help organisations contain threats, understand their impact and move forward decisively. As a Senior Associate, you'll work on complex, high-profile investigations as part of a collaborative global team that delivers clarity when it matters most.

What You'll Do

Lead investigations into ransomware, data breaches, insider threats and business email compromise through containment, recovery and reporting.
Analyse forensic evidence across endpoints, networks, cloud and enterprise systems.
Translate findings into practical remediation and clear business decisions for clients and senior stakeholders.
Work with legal counsel, insurers and regulators; prepare concise reports and mentor junior consultants.

What We're Looking For

You are technically strong, client-focused and calm under pressure, with the judgement to turn complex evidence into actionable advice.

3+ years' experience in incident response, digital forensics, cyber investigations or a related field.
Hands-on strength in incident response, forensics, malware analysis, network security or security assessments.
Strong communication, stakeholder management and prioritisation skills; consulting experience and relevant certifications are advantageous.

Why Kroll

Work on complex, high-profile incidents with recognised global DFIR experts.
Build cross-industry experience through mentorship and continuous development.
Help organisations respond to and recover from cyber crises.

No Agencies Please

Ready to solve critical cyber challenges? We'd like to hear from you.

Apply at careers.kroll.com.