Cyber Incident Response Manager

The Role

This hands-on position centres on managing reactive digital forensics and incident response (DFIR) cases of medium to large scale. When not leading live incidents, the role involves helping clients strengthen their own response capabilities through runbooks, tabletop exercises, and maturity assessments, as well as contributing to internal tooling and operational development.

Skills & Experience

Candidates must bring a proven background in incident response and digital forensics, with demonstrated case management experience. Security clearance at SC or DV level is required, or eligibility to obtain it. The role suits those already working toward or holding recognised security certifications, with further training provided in post.

Who It Suits

This role is well suited to an experienced DFIR practitioner ready to step into a leadership capacity, managing cases and guiding junior colleagues. Those who thrive in fast-paced, varied environments and want structured career progression within a high-performing, nationally recognised incident response team will find this opportunity particularly rewarding.