The DF&IR Team

Incident Handlers are the first line of response — performing initial triage, alert analysis, and containment actions under the guidance of senior team members. They operate the SIEM, EDR, and ticketing platforms, and are the primary point of contact for clients during the initial response phase.

Forensic Examiners perform hands-on evidence acquisition, processing, and initial analysis under the supervision of Forensic Investigators. They are the workhorses of the DF&IR team — handling evidence imaging, log collection, IOC extraction, and preliminary report drafting.

Forensic Investigators lead individual case investigations — from evidence acquisition through analysis to final report. They specialise in specific forensic domains (endpoint, network, cloud, or malware) and are the primary technical responders on active incidents.

The Digital Forensic Lead manages a team of forensic investigators and examiners, coordinates complex multi-system investigations, and serves as the technical authority on forensic methodology, evidence handling, and chain-of-custody procedures.

The Forensic Director provides strategic leadership for the entire DF&IR practice — setting methodology standards, overseeing major incident response engagements, managing client relationships at executive level, and representing SpiderIQ in regulatory and legal proceedings.