Asymmetric Security
INCIDENT RESPONSE LEAD, DFIR (UK)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About Asymmetric Security
The last great shift in computing, the cloud, created a new generation of giants in DFIR, like Crowdstrike. The next great shift—AI—will be even bigger. It will create new giants. We are building one of them.
Asymmetric is the world’s first AI-native DFIR lab. We build human-AI analyst teams designed from the ground up to redefine the next generation of DFIR. Our AI agents take on the repetitive, laborious work, freeing analysts to focus on the most challenging and critical parts of investigations.
Our first AI agent is already live, running Business Email Compromise (BEC) investigations for a DFIR partner as part of a six-figure contract. We are backed by a $4.2M investment by some of the world’s best investors, including Susa Ventures, Matt Clifford, Charlie Songhurst (Meta board member), and Geoff Ralston.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
About The Role
We are assembling a world-class team and are looking for a talented and ambitious Incident Response Lead to shape how DFIR is done in the AI era. You will lead technically challenging forensic work and grow into a key technical leader at Asymmetric. You will be supported by an AI engineering team dedicated to automating the least interesting parts of your job, freeing you to focus on what matters most: solving the most complex analytical challenges within each case.
This is a role on the founding team that comes with significant responsibility. We will pay exceptionally well for top performers.
Responsibilities
- Lead investigations including business email compromise, ransomware, network intrusions, and insider threats. Your initial focus will be on cloud-based email attacks across Google and Microsoft environments.
- Build defensible timelines and substantiate findings across log sources.
- Take challenging forensic problems, including uncovering novel attack paths.
- Codify best practices, contributing to case handbooks.
- Partner with the engineering team to develop AI DFIR tools.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
You May Be a Fit If You
- Have significant experience in major incident investigations and forensic analysis efforts.
- Have investigated cloud-based attacks in Microsoft and/or Google Workspace.
- Are skilled in developing playbooks and analysis plans for complex forensic investigations.
- Can communicate technical findings clearly with key stakeholders and team members.
- Excited about uncovering novel threat actor TTPs.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location