Cyber Response & Recovery Assistant Manager (Reactive DFIR)

The Role

This hands-on position sits within a specialist cyber response team, focusing on reactive digital forensics and incident response. Day to day, the role involves acting as a junior case manager on smaller engagements or supporting senior colleagues on complex incidents, alongside proactive work such as developing playbooks, tooling, and client IR maturity assessments.

Skills & Experience

Candidates require a demonstrable technical background in digital forensics and incident response, with proven experience managing or supporting IR cases. The role offers access to a range of security certifications. Current SC or DV clearance, or eligibility to obtain it, is a mandatory requirement for appointment.

Who It Suits

This role suits an emerging DFIR professional ready to grow into a full incident response manager position. It is well matched to someone who thrives in fast-paced, varied environments, wants broad exposure across a high volume of cases quickly, and values working within a structured, high-performing advisory team.