Digital Forensics Jobs: United Kingdom
79 current openings, updated daily. Links to original listings.
Digital Forensics Analyst
Computer Forensics Lab
London, England
A full-time, on-site London role conducting forensic analysis of mobile phones, computers and digital media. Responsibilities include evidence handling, malware analysis, data recovery and report writing, supporting legal and investigative clients.
View JobDigital Forensic Technician
Insolvency Service
Stratford, England
A government forensic computing unit seeks a technician to acquire and examine digital evidence for civil and criminal insolvency investigations, supporting field operations at business premises, search warrants and courts.
View JobIncident Response Lead (DFIR)
LT Harper Recruitment Group
England
Lead a cyber response team handling nationally significant incidents across government, CNI and enterprise. Combines hands-on digital forensics with operational leadership, covering the full incident lifecycle from triage and containment to recovery and client capability uplift.
View JobNMC Cyber Incident Responder (Digital Forensics)
Police Digital Service
Wigan, England
Lead and support cyber security incident investigations across UK policing, conducting forensic examinations of endpoints, memory and cloud environments, analysing digital evidence, and advising senior stakeholders on containment, remediation and response.
View JobIncident Response Specialist
Marcus Donald People
England
Join a banking-sector cyber security team as a contract incident response specialist, investigating security breaches, conducting digital forensics, and strengthening enterprise defences. Wednesday–Saturday schedule; predominantly remote with monthly London office visits.
View JobDigital Forensic Technician
The Insolvency Service
London, England
A government forensic computing unit seeks a technician to acquire and analyse digital evidence, support search warrants and investigations, maintain laboratory systems, and produce evidential reports and statements.
View JobExperienced Digital Forensic Specialist
Keith Borer Consultants
Durham, England
Join a leading forensic science consultancy in Durham as a digital forensics specialist, conducting mobile device examinations, producing expert reports, presenting evidence in court, and supporting ISO 17025 accreditation across a varied caseload.
View JobSenior Forensics Associate EMEA
Lighthouse Document Technologies Inc.
London, England
A senior digital forensics role delivering forensically sound ESI collections from endpoints, mobile devices and cloud sources, supporting investigations and litigation across onsite and remote engagements in the EMEA region.
View JobSenior Incident Response Consultant, Mandiant (Weekend team)
United Kingdom
Lead complex client-facing incident response engagements on a weekend shift pattern, conducting host, network, and cloud forensics, malware triage, and log analysis while mentoring junior consultants and reporting findings to executive audiences.
View JobManager/Assistant Manager Digital Forensics, Forensic & Financial Crime
Deloitte
London, England
Lead digital forensic investigations across commercial and public sector clients within an ISO 17025 accredited lab, managing data acquisition, analysis and reporting while mentoring junior team members and handling multiple concurrent matters.
View JobS26-285 Victim Identification Officer (LC7)
Lancashire Constabulary
Preston, England
A specialist law enforcement role within a Digital Forensics Operational Support Team, using cutting-edge forensic techniques and the national Child Abuse Image Database to identify victims of child sexual abuse and support prosecutions.
View JobForensic Analyst -Digital Forensics Unit
Norfolk Constabulary
Norwich, England
Join a fully accredited Joint Digital Forensic Unit supporting Norfolk and Suffolk Police, examining digital devices, producing evidential reports, advising investigators, and providing expert court testimony using industry-leading forensic tools.
View JobSenior Associate, Digital Forensics and Incident Response
Kroll
United Kingdom
Join a global DFIR team responding to 2,000+ incidents annually. Lead complex investigations into ransomware, data breaches and insider threats, analysing forensic evidence across endpoints, networks and cloud environments while advising senior stakeholders.
View JobConsultant, Digital Forensics and Incident Response
Control Risks
London, England
A London-based consultancy role delivering digital forensics, incident response and eDiscovery services to law firms, multinationals and government clients, acting as technical lead on cases and supporting business development efforts.
View JobAssociate Consultant, Digital Forensics and Incident Response
Control Risks
London, England
A London-based consultancy role supporting digital forensics and incident response engagements across data breach investigations, forensic evidence handling, and eDiscovery for law firms, multinationals, and government clients, with up to 25% international travel.
View JobSenior Consultant, Digital Forensics and Incident Response
Control Risks
London, England
Senior DFIR consultant role based in London, serving global clients including law firms, multinationals and government. Leads forensic investigations and cyber incident response engagements, with regional travel and business development responsibilities.
View JobDigital Forensic Senior Analyst
S-RM
London, England
A senior digital forensics analyst role based in London, conducting forensic preservation and analysis across Windows, Linux, macOS, iOS, Android and cloud platforms, delivering clear written reports to legal and senior stakeholders.
View JobCyber Incident Response – Senior Manager
LT Harper Recruitment Group
London, England
Lead complex cyber incident response engagements for a Risk Consulting practice, managing forensic investigations across disk, memory, network and logs, while developing client IR capabilities and mentoring technical practitioners.
View JobDigital Forensics and Incident Response (DFIR) Specialist – UK Remote
LevelBlue
United Kingdom
Join a global DFIR team conducting forensic investigations and incident response across endpoints, networks, and cloud platforms. Responsibilities include evidence collection, root-cause analysis, and producing clear, narrative-driven reports for technical and non-technical audiences.
View JobDigital Forensic Practitioner
Home Office
Cardiff, Wales
Join a government digital forensics unit supporting immigration enforcement criminal investigations. Responsibilities include forensic device extraction, data analysis, audio/video enhancement, court testimony, and advising officers on digital evidence handling.
View JobSenior Digital Forensic Investigator (NEROCU)
Northumbria Police
Sunderland, England
Lead a specialist Digital Forensic Unit tackling serious and organised crime, overseeing extraction and analysis of 2,000+ devices annually, managing a team, advising investigators, and presenting evidence in court.
View JobDigital Forensic Unit Technician (NEROCU)
Northumbria Police
Sunderland, England
Join a regional organised crime unit's Digital Forensic Unit, extracting and analysing data from over 2,000 electronic devices annually to support high-profile criminal investigations, court proceedings, and compliance with forensic accreditation standards.
View JobCyber Security Incident Manager
SEP2
England
Join a fast-growing UK cyber security specialist to lead DFIR engagements, manage incident response, coordinate analyst teams, produce post-incident reports, and onboard customers into a dedicated DFIR service. Remote-friendly with occasional travel to Leeds.
View JobDigital Forensic Technician
Serious Fraud Office (UK)
London, England
A hands-on digital forensics role within a government fraud investigation unit, involving forensic imaging, mobile device extraction, evidence acquisition, data analysis, and preparation of digital material for legal review platforms.
View JobSenior Incident Responder (DFIR)
Tesco
Welwyn Garden City, England
Join an in-house DFIR team conducting forensic analysis and incident response across on-premises and cloud environments. Lead threat hunts, support detection engineering, and drive automation to protect a large, complex retail technology estate.
View JobDigital Forensics & Incident Response Consultant
LevelBlue
United Kingdom
Join a global DFIR team conducting forensic investigations and incident response engagements across endpoints, networks, SaaS, and cloud platforms. Responsibilities span evidence collection, root cause analysis, and producing clear narrative reports for technical and non-technical audiences.
View JobDigital Forensics and Incident Response, Senior Consultant DFIR
Control Risks
London, England
A senior DFIR consultant role embedded in a London-based team, leading forensic investigations and cyber incident response engagements for law firms, multinationals and government clients, with up to 25% international travel.
View JobDigital Forensic Professionals
Oscar
England
A specialist digital forensics organisation in Stratford-upon-Avon is seeking professionals at all levels — from junior analysts to senior specialists — with hands-on experience in computer, mobile and evidence analysis using industry-standard tools.
View JobLead Cyber Incident Response Consultant
The Tech Recruiter
United Kingdom
Lead complex cyber incident investigations across Windows, Linux, macOS and multi-cloud environments. Perform advanced digital forensics, threat analysis, and evidence handling while advising clients and mentoring junior team members on IR readiness.
View JobCyber Response & Recovery Manager (Reactive DFIR) – German Speaking
KPMG UK
London, England
Lead reactive DFIR engagements as case manager on medium to large incidents, conducting digital forensics and incident response, developing client IR capabilities, and managing cyber response tooling and playbooks for a Tier 1 UK provider.
View JobIncident Responder
Rooted
London, England
Scope and contain live security incidents, reconstruct intrusions using host and network forensics, preserve evidence, and produce clear written timelines for clients and regulators in a fast-paced IR consultancy environment.
View JobSenior Incident Response Consultant, Rapid Response
Sophos
United Kingdom
Lead incident response engagements for organisations experiencing cyberattacks, directing forensic investigations, conducting root cause analysis, identifying TTPs, and producing executive reports mapped to the MITRE ATT&CK framework for global customers.
View JobFrontline Digital Forensic Technician (FTC/Secondment)
Thames Valley Police
Milton Keynes, England
Fixed-term/secondment role within a police Forensic Investigation Unit, conducting frontline triage and early examination of digital exhibits, identifying material for further analysis, and supporting crime investigations across multiple locations.
View JobCyber Security Incident Response Analyst
IBM
Hursley, England
Join IBM's CSIRT team conducting forensic investigations and cyber incident analysis, including digital media examination, network traffic analysis, malware triage, SIEM log review, and evidence handling across heterogeneous environments.
View JobCyber Incident Responder
CYFOR
Manchester, England
Experienced Cyber Incident Responder needed to investigate and contain cyber incidents, conduct forensic acquisitions, analyse malware, correlate evidence from compromised systems, and deliver technical reports to clients. SC clearance required.
View JobDirector, Digital Forensics & Incident Response (Global)
NCC Group
Manchester, England
Lead a global Digital Forensics and Incident Response function, setting strategic direction, overseeing major cyber incidents, developing advanced forensic capabilities, and driving operational excellence across regionally distributed teams.
View JobSenior Digital Forensics and Incident Response (DFIR) Consultant
Cypfer
London, England
Lead complex DFIR investigations for a global cybersecurity first-responder firm, conducting forensic analysis across Windows/Linux/virtual platforms, malware triage, threat hunting, and incident response for ransomware and cyber-extortion events.
View JobCyber Response & Recovery Manager – German Speaker
KPMG
London, England
Manages reactive DFIR engagements as case lead, conducting digital forensics across disk, memory, network and logs, advising clients on threat landscape, building IR capabilities, and developing internal tooling and runbooks.
View JobSenior Digital Forensics and Incident Response Analyst
Barclays
Knutsford, England
Senior DFIR Analyst role within a financial institution's Security Operations Centre, leading investigation of complex cyber incidents, applying digital forensic techniques, analysing endpoint and network artefacts, and improving detection and response capabilities.
View JobDigital Forensics and Incident Response (DFIR) Consultant
Cypfer
London, England
Consultant role covering end-to-end incident response and digital forensics, including forensic acquisition, Windows triage, malware analysis, IOC investigation, log review, and client-facing remediation for ransomware and cyber-extortion cases.
View JobDigital Forensics Laboratory Team Leader
CCL Solutions Group Ltd
Stratford-upon-Avon, England
Lead and manage a digital forensics laboratory team, overseeing analyst performance, caseload management, quality standards, training, and customer project delivery, while maintaining a personal forensic examination caseload.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
Remote
Lead complex incident response engagements for Mandiant clients, conducting host and network forensics, malware triage, threat hunting, and cloud investigations while mentoring junior consultants and communicating findings to executive stakeholders.
View JobDigital Forensic Unit Investigator
Northumbria Police
Newcastle Upon Tyne, England
Join Northumbria Police's Digital Forensics Unit, extracting and analysing data from 2,000+ devices annually. Duties include evidence retrieval, specialist advice to investigators, victim identification, court testimony, and continuous quality improvement.
View JobDigital Forensics and Incident Response Analyst
Mishcon de Reya LLP
London, England
Join an NCSC/CREST-accredited cyber team as a first responder handling client cyber incidents, conducting forensic acquisition and analysis across platforms including mobile devices, and supporting containment, eradication and remediation activities.
View JobDigital Media Examiner – Counter Terrorism Policing
West Midlands Police
Birmingham, England
Specialist digital forensics examiner role within a Counter Terrorism Policing Digital Media Exploitation Unit, conducting forensic acquisition and analysis of digital devices, preparing evidence packages, attending court, and maintaining ISO 17025 accreditation.
View JobDigital Media Examiner – Technician – NDES S3 – Police Staff – CTP London
Counter Terrorism Policing
Brompton, England
Join Counter Terrorism Command as a Digital Forensic Technician, conducting forensic imaging and data extraction from mobile devices, computers and storage media. Support investigations, peer-review examinations and provide court witness testimony.
View JobDigital Forensics and Cyber Crime Investigator – South West Regional Organised Crime Unit (SWROCU)
Avon and Somerset Police
Almondsbury, England
Join a Regional Cyber Lab conducting live and dead-box data recovery, network forensics, and mobile device examination to support serious cybercrime investigations including ransomware, intrusions, malware and data breaches across the South West region.
View JobIncident Response Lead, DFIR
Seldon Lab
London, England
Founding Incident Response Lead role at an AI-native DFIR company, leading complex cloud and enterprise investigations, codifying best practices, and collaborating with AI engineers to automate routine forensics tasks.
View JobDigital Multimedia Evidence Unit Manager
Nottinghamshire Police
Nottingham, England
Lead Nottinghamshire Police's Digital Multimedia Evidence Unit, overseeing forensic preservation, extraction and presentation of CCTV, audio and video evidence, ensuring ISO compliance, managing team performance and attending court as an expert witness.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
United Kingdom
Lead complex, high-profile incident response engagements for enterprise clients, conducting host and network forensics, malware triage, threat hunting, and log analysis while developing reports for technical and executive audiences.
View JobCyber Response & Recovery Assistant Manager (Reactive DFIR)
KPMG UK
London, England
Hands-on reactive DFIR assistant manager role within a Tier 1 UK incident response team, performing digital forensics across disk, memory, network and logs, managing smaller cases and supporting clients through complex cyber incidents including ransomware and network intrusions.
View JobSenior Security Engineer, Security Incident Response Team (SIRT) – EMEA
GitLab
Remote
Senior Security Engineer joining a global incident response team, leading high-severity investigations across cloud environments, building detection and automation capabilities, and applying DFIR methodologies within a 24/7 follow-the-sun model during EMEA hours.
View JobPrincipal Consultant, Incident Response (Weekend Schedule)
Palo Alto Networks
London, England
Lead and manage end-to-end incident response engagements for a range of clients, conducting host-based forensic analysis, log review, and breach investigations using industry-standard tools to deliver containment and remediation guidance.
View JobSenior DFIR Investigator
CFC
London, England
Lead complex digital forensics and incident response investigations across host, network and cloud environments. Analyse threat actor activity, produce forensic reports, mentor junior investigators, and deliver proactive cyber resilience services to global clients.
View JobPrincipal Consultant, Incident Response (Unit 42)
Palo Alto Networks
City Of London, England
Lead client-facing incident response engagements for Unit 42, performing host-based forensic analysis, log investigation, and data breach response across Windows, Linux, and macOS. Mentor junior staff and deliver actionable remediation recommendations to clients.
View JobData Forensic Investigator
Wiltshire Police
Devizes, England
Responsible for identifying, preserving, extracting and presenting digital evidence from computers and mobile devices in support of criminal investigations. Provides expert advice to officers and presents findings at judicial proceedings.
View JobDigital Forensics Practitioner
HM Revenue & Customs
Nottingham, England
Support HMRC fraud investigations by forensically acquiring and examining digital devices including computers, mobile phones and CCTV systems. Prepare evidential reports, attend court, assist with warrant executions, and adhere to ISO17025 and FSR standards.
View JobCyber Incident Response
LT Harper Recruitment Group
England
Three cyber response consulting roles covering digital forensics and incident response, security operations advisory, and post-incident recovery and remediation. Requires SC/DV clearance and experience with complex incidents across government and critical infrastructure.
View JobCyber Security Analyst
The Tech Recruiter
United Kingdom
Lead complex cyber incident investigations across Windows, Linux, macOS and multi-cloud environments. Perform advanced digital forensics, threat analysis and evidence handling while advising clients at executive level and mentoring junior team members.
View JobDigital Forensics Specialist
TechNET IT Recruitment Ltd
Cheltenham, England
Join a global organisation's Cyber Incident Response Team, conducting forensic investigations across endpoints, cloud and identity platforms during live incidents, producing technical reports and improving forensic tooling and playbooks.
View JobData Forensic Technician
Avon and Somerset Police
Bristol, England
Join a South West Police forensics team examining computers and digital devices to extract and analyse evidence for criminal cases. Responsibilities include forensic imaging, triage examination, evidential statements, and court presentation.
View JobCyber Response and Recovery – Assistant Manager (Reactive)
KPMG
London, England
Hands-on reactive DFIR role within a Tier 1 UK incident response team. Perform digital forensics, manage smaller IR cases, advise on threat landscape, support client IR capability building, and contribute to internal tooling and lab development.
View JobDigital Forensics Investigator – Birmingham City Centre
Resillion
Birmingham, England
Experienced Digital Forensic Investigator required to conduct forensic examinations of mobile devices, computers and digital storage media, producing court-ready reports and presenting evidence as an expert witness within an ISO/IEC 17025 accredited environment.
View JobForensics Consultant
Lineal
London, England
Client-facing digital forensics consultant responsible for forensic data collection, processing and analysis across PCs, mobile devices, servers and cloud systems. Leads investigations end-to-end, advises on best practices and supports eDiscovery processes using tools such as EnCase, FTK and Cellebrite.
View JobCyber Response & Recovery – Senior Manager
KPMG UK
United Kingdom
Senior manager role leading cyber incident response and digital forensics engagements, managing a team of practitioners, developing IR capabilities, tools and runbooks, and advising clients on threat landscape and response maturity.
View JobDigital Forensic Consultant – £50,000 to £75,000 – London (flexible hybrid)
APT Search
London, England
Lead end-to-end digital forensic investigations for a global risk and investigations consultancy. Responsibilities include onsite/remote collections, analysis across mobile and desktop platforms, forensic reporting, and client-facing presentation of findings.
View JobDigital Forensics & Cyber Incident Responder – Hybrid – London
Lorien
London, England
Join a specialist DFIR team investigating live cyber attacks, ransomware incidents and security breaches. Responsibilities include forensic evidence analysis, threat hunting, malware analysis and supporting clients through complex security incidents.
View JobAssistant Digital Investigator
Resillion
Birmingham, England
Perform forensic examination and data acquisition of digital devices including mobile phones and computers, recover extant and deleted data, produce intelligence reports, and provide expert witness testimony in Crown Court to national forensic standards.
View JobDigital Forensics Examiner – NDES S3 – Police Staff – CTP London
Counter Terrorism Policing
Brompton, England
Counter Terrorism Policing seeks a Digital Forensics Examiner to forensically image and analyse digital devices, recover encrypted/deleted data, prepare evidential reports and statements, and support major CT investigations including on-call and scene attendance duties.
View JobCyber Response & Recovery – Senior Manager
KPMG
London, England
Senior Manager role leading cyber incident response and digital forensics engagements for clients. Responsibilities include hands-on forensic analysis, IR capability development, team leadership, runbook authoring, and client-facing advisory work across complex cyber incidents.
View JobCyber Incident Response Manager
Pwc UK
London, England
Lead and manage cyber incident response engagements for global clients, performing technical analysis of breaches and intrusions, mentoring junior staff, developing detection content, and collaborating with threat intelligence and ethical hacking teams.
View JobCyber Security Consultant
Realtime Recruitment
Northern Ireland
Mid-level Cyber Incident Response Consultant role involving detecting, investigating and responding to cybersecurity incidents, conducting forensic analysis, managing containment and recovery, and producing technical reports for clients across enterprise environments.
View JobCyber Digital Forensics & Incident Response Manager
Capgemini
Manchester, England
Lead a team of DFIR analysts within a 24x7 Cyber Defence Centre, overseeing incident response, digital forensic investigations, evidence analysis across endpoint and cloud environments, and executive-level reporting.
View JobDigital Forensics & Insider Risk Analyst
Morgan Stanley
Glasgow, Scotland
Lead end-to-end digital forensic investigations and eDiscovery activities within an insider risk management function. Responsibilities include evidence collection and analysis, SIEM correlation, stakeholder management, and ensuring regulatory defensibility across global financial services operations.
View JobDigital Forensic Analyst
South Yorkshire Police
Sheffield, England
Join a police Digital Forensic Unit securing and analysing evidence from mobile phones and computers, presenting findings to courts, maintaining ISO17025 accreditation, and mentoring junior staff in a permanent Sheffield-based role.
View JobInternational Digital Forensics and Incident Response (DFIR) Expert
Mastek
Reading, England
Specialist DFIR role delivering end-to-end incident response and forensic examinations across endpoints, servers and cloud platforms for global clients, producing investigation reports and improving cyber resilience for public and enterprise sectors.
View JobDFIR Lead Cyber Operations Analyst
Barclays
Knutsford, England
VP-level hands-on DFIR role within a major bank, leading complex digital forensic investigations and incident response across host, network and cloud environments, with malware analysis, stakeholder reporting and on-call responsibilities.
View JobSenior Director | Digital Forensics & Investigations
FTI Consulting
London, England
Lead complex digital forensic investigations across devices, cloud and mobile platforms for corporate, legal and regulatory clients. Act as expert witness, mentor junior staff, and drive methodology development within a global DFIR practice.
View JobInformation Security Incident Response Analyst
NTT DATA, Inc.
London, England
Supports clients during security incidents through host, disk, memory, network, and cloud forensic analysis. Reconstructs attacker timelines, identifies IOCs, and delivers clear technical findings across diverse environments including OT/ICS systems.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.