Cybersecurity Lead Investigator
Core
Lead investigator orchestrating evidence-driven cybersecurity investigations and technical incident response across on-premises and cloud environments.
Role type
Senior IC cybersecurity lead investigator
Builds
Incident timelines, technical response plans, and executive briefings for enterprise customers
Domain
Cybersecurity / Incident Response
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
leading large-scale incident response, correlating multi-source evidence, reconstructing incident timelines, evaluating compromise scope, explaining findings and uncertainty, managing global follow-the-sun investigations, adversary activity analysis, technical mentoring, developing technical publications
Preferred skills
experience with nation-state or cybercrime activity, research and analytical automation, data-quality improvement
Technologies
on-premises environments, cloud environments
Responsibilities
Set investigation objectives and hypotheses; lead hands-on analysis and specialist workstreams; coordinate execution with customer-authorised teams; serve as primary technical point of contact for complex investigations; brief executives, legal, and compliance stakeholders; identify skill and resource gaps; maintain investigative documentation and follow-the-sun handovers
Seniority
Senior, hands-on IC with leadership responsibilities
