Account Executive, DFIR
Strand Intelligence · Manchester, UK (in-office)
About Strand
Strand automatically investigates security incidents. Our SaaS platform automates the forensic investigation itself, from evidence collection to a finished, defensible report, across Microsoft 365, Google Workspace, AWS and endpoints, including ransomware cases. We sell software, not services.
Backed by Osney Capital, our customers include Big Four advisory firms, global incident response specialists and cyber insurers. Strand is ISO 27001 certified, holds Cyber Essentials Plus, and won Most Innovative Cloud Product or Service at the CRN Cloud Excellence Awards 2026.
The role
You'll own Strand's revenue from DFIR firms: the incident response providers, forensic consultancies and insurer panel firms who use Strand to run more investigations with the same team. This is a full-cycle SaaS AE role carrying an ARR quota, from first conversation to signed agreement and expansion. You'll report to Oli Fletcher, Co-Founder and COO.
DFIR firms are a distinct buyer. They are practitioners first, sceptical of anything that claims to replace an examiner, and they buy on case volume, not seats. Strand makes their analysts more productive rather than replacing them, and you'll need to sell that credibly to people who do the work themselves.
What you will own
- New business. Build and work a target list of UK and international DFIR firms, from boutique specialists to the forensic teams inside advisory firms and insurer panels, with support from our SDRs
- Demos. Top and tail demos with our forensic experts, to move customers through the sales lifecycle and to close.
- Proofs of concept. Scope and run POCs on real cases with our technical team, against success criteria agreed in writing up front.
- Land and expand. Land firms on consumption pricing, move them to committed annual tiers as usage grows, then expand into more case volume, modules and practice teams.
- Commercials. Negotiate pricing and MSAs alongside the founders.
- Channels. Work the places DFIR firms gather: cyber insurers and their panels, industry events and practitioner communities.
- CRM rigour. Accurate pipeline, clean activity, honest forecasting.
- Market feedback. DFIR firms will tell you exactly what they need next. Bring that back into product, pricing and positioning.
What we're looking for
- 4+ years selling B2B SaaS, with 2+ as a closing AE on a new business ARR quota.
- A proven record selling cyber security SaaS. Services-only or reselling backgrounds will not be considered.
- Consistent performance against quota: quarters you can point to where you over-attained, and how.
- Fluent in SaaS commercials: ARR, expansion, net revenue retention, and consumption pricing that converts to committed annual contracts.
- Technically credible with examiners. You can talk through an investigation workflow, evidence handling and cloud logs without reaching for an engineer every time.
- Experience running structured POCs that convert.
- Seed-stage temperament: comfortable with ambiguity and building process as you go.
What would make you stand out
- Hands-on DFIR, SOC or incident response experience before moving into sales.
- You've sold into DFIR firms, IR consultancies, cyber insurers or Big Four forensic teams.
- You've been an AE in a high-growth seed or Series A cyber startup.
- Familiarity with the tools DFIR teams already use, such as KAPE, Velociraptor and EDR platforms.
Compensation
- Base: £55,000 - £70,000 depending on experience.
- OTE: £110,000 - £140,000, uncapped, with accelerators on over-attainment.
- Share options in Strand.
- MacBook, monitor and a fully-kitted on-the-road and office setup.
- £2,500 personal travel allowance per year, for your holidays.
- Your birthday off, on us.
- Team offsites, quarterly socials and a genuinely good culture.
- Training and development budget aligned to your career path.
- Strand Intelligence is an equal opportunities employer. We welcome applications from all backgrounds and are committed to building a team that reflects the diversity of the customers and communities we serve.
#J-18808-Ljbffr
