Senior Incident Response Security Consultant, Mandiant, Google Cloud
United Kingdom
The Role
This senior consulting position centres on leading end-to-end incident response engagements for clients facing complex, high-profile cyber incidents. Day-to-day responsibilities include forensic analysis across disk, memory, network, and cloud environments, threat hunting, malware triage, containment, remediation, and crisis management, with up to 30% travel expected.
Skills & Experience
Candidates require at least five years of hands-on incident response and forensic investigation experience spanning network, cloud, disk, and memory analysis. Relevant certifications such as GCFA, GCFE, GNFA, GCIA, GREM, GCIH, or GX-FA are advantageous, as is experience with cloud platforms and participation in CTF competitions or practice platforms.
Who It Suits
This role suits an experienced security professional who is equally comfortable performing deep technical analysis and communicating findings clearly to executive leadership, legal counsel, and technical teams. Someone who thrives under pressure, manages competing priorities effectively, and is willing to mentor junior colleagues will excel here.
Typical advertised salary for Incident Response roles in United Kingdom: £53,000–£85,000 (median £68,000 — from 24 recent listings analysed by Forensic Focus).
Compare Incident Response salaries in United Kingdom →
Certifications mentioned: GCFA · GCFE · GREM · GNFA · GCIH — find training for these on the DFIR Training Finder.
