Incident Response and Forensic Analyst

The Role

This position leads the full lifecycle of cybersecurity incident response, from initial detection through containment, eradication, and recovery. Day to day work includes conducting digital forensic investigations on compromised systems, analysing disk images, memory dumps, and network traffic, and preserving evidence in accordance with chain of custody requirements.

Skills & Experience

Candidates should bring hands-on experience with industry-standard forensic tools and methodologies, covering endpoint, network, and log analysis. Familiarity with forensic integrity procedures and chain of custody practices is essential. Prior experience developing incident response procedures and providing expert remediation guidance is expected at this senior level.

Who It Suits

This role suits an experienced cybersecurity professional who thrives in high-stakes environments and is comfortable operating across both classified and unclassified enterprise systems. Someone who enjoys leading investigations end to end, collaborating with a specialist team, and contributing to security programmes that support nationally significant infrastructure will find it rewarding.