Digital Forensics Jobs: United Kingdom
70 current openings, updated daily. Links to original listings.
Incident Response Sr. Consultant (Remote)
CrowdStrike
United Kingdom
Senior consultant role conducting incident response investigations for major global organisations, performing host, network and cloud forensics, hunting threat actors, and delivering findings to stakeholders and legal counsel.
View JobDigital Forensics – Team Leader
Resillion
Birmingham, England
Lead a team of digital forensic investigators, conducting computer and mobile device examinations, producing court-ready reports, mentoring junior staff, and ensuring quality and compliance with forensic accreditation standards.
View JobUK Cyber Manager – DFIR
LevelBlue
United Kingdom
Lead hands-on digital forensics and incident response engagements, investigating breaches across endpoints, servers and cloud platforms, producing defensible reports and presenting findings to clients and senior stakeholders.
View JobDigital Forensics and Incident Response Consultant
Outbreach
United Kingdom
Join a bench of DFIR practitioners handling live incidents, from evidence acquisition through host, cloud and identity forensics to writing evidential reports for clients, insurers, lawyers and regulators on a flexible, hourly-rate basis.
View JobDigital Forensics Investigator
City of London Police
City Of London, England
A police digital forensics unit seeks an investigator to image, extract and examine digital evidence, maintain evidential integrity, and provide statements and court testimony supporting criminal investigations across all crime types.
View JobDigital Forensics & Incident Response
Candour
Manchester, England
Join a growing cyber security software company investigating security incidents, validating forensic evidence, and advising customers, while shaping product development alongside the founding team.
View JobSenior Digital Forensic Analyst
Red Snapper Recruitment | Public Safety
Stratford-Upon-Avon, England
An established forensic laboratory seeks an experienced analyst to conduct forensic examinations of mobile devices and computers, handling complex casework, producing technical reports and supporting quality assurance within an accredited environment.
View JobSenior Associate, Incident Response
Kroll
United Kingdom
Lead high-profile cyber investigations covering ransomware, data breaches and insider threats, analysing forensic evidence across endpoints, networks and cloud, and translating findings into practical remediation advice for clients.
View JobPrincipal Consultant, Digital Forensics & Incident Response
Verizon
Reading, England
Lead high-stakes enterprise cyber investigations spanning host, network, and cloud forensics, while advising executive clients, driving incident response strategy, and supporting pre-sales growth across EMEA.
View JobDigital Forensic Analyst
4Square Recruitment Ltd
Birmingham, England
An experienced forensic analyst is sought to handle varied computer and mobile device investigations, producing expert reports, mentoring juniors, and supporting quality and validation processes within an established forensics team.
View JobSenior Cryptoasset Investigation Specialist
Serious Fraud Office (UK)
London, England
Trace cryptoasset flows in complex fraud, bribery, corruption and money laundering cases, producing witness statements, guiding investigators, and reporting findings to senior managers within a law enforcement agency.
View JobAdvisory – Forensic Technology Manager / Assistant Manager / Senior Consultant – Dublin/Belfast
Grant Thornton (NI) LLP
Belfast, Northern Ireland
Experienced forensic technology professional sought to deliver digital investigations, eDiscovery and data analysis for clients facing disputes, misconduct, regulatory scrutiny or business distress, working across computers, mobile devices and cloud platforms.
View JobManager, Incident Response
Kroll
United Kingdom
Lead high-profile cyber investigations end-to-end, managing scope, budget and client relationships while directing forensic analysis across endpoints, networks and cloud systems for ransomware, breach and insider threat cases.
View JobManager, Digital Forensics and Incident Response
Aon
London, England
Lead complex digital forensic investigations and breach responses across devices, networks and cloud infrastructure, mentoring junior staff while delivering expert analysis and client-facing reports in a hybrid London-based role.
View JobET 2027 | Graduate Scheme, Digital Forensics
FTI Consulting
London, England
Graduate scheme offering hands-on training in digital evidence acquisition, forensic analysis and reporting across mobile, computer and cloud data sources, supporting senior investigators on client engagements worldwide.
View JobDigital Media Investigator
Heddlu Dyfed-Powys Police
Carmarthen, Wales
A police force seeks a specialist investigator to provide digital evidence and intelligence expertise supporting major crime and complex investigations, including data acquisition and digital investigative techniques.
View JobIncident Response Consultant
Quorum Cyber
United Kingdom
Investigate cyber security incidents across Windows, Linux, macOS and cloud environments, performing host, network and memory forensics, identifying threat actor TTPs, and supporting containment and recovery efforts.
View JobSenior Digital Evidence Technician
Nottinghamshire Police
Nottinghamshire, England
Join a police Digital Forensics Unit examining and analysing digital evidence from mobile devices, computers and other media. Produce court-ready reports, mentor colleagues and maintain forensic standards within an accredited environment.
View JobDigital Forensics Analyst
CACI Ltd
Northallerton, England
Join an accredited digital forensics team delivering forensic investigation and proficiency testing services to UK law enforcement. Examine computers, mobile devices, CCTV, audio and cloud data, produce court-ready reports, and contribute to laboratory quality standards.
View JobPrincipal Cyber Incident Response Consultant
The Tech Recruiter
United Kingdom
Lead complex cyber incident investigations across Windows, Linux, macOS and cloud environments, performing advanced forensics and threat analysis while advising executive stakeholders, delivering IR readiness assessments, and mentoring junior team members.
View JobSenior Incident Response & Digital Forensics Analyst
Bloomberg
London, England
Lead complex security incident investigations within a global CSOC, conducting host, memory, network and log forensics, malware analysis, and threat hunting, while mentoring analysts and shaping forensic capabilities and detection coverage.
View JobDigital Forensics & Incident Response Analyst
A.P. Moller - Maersk
Maidenhead, England
Conduct enterprise-scale digital forensic investigations and incident response across endpoint, cloud, and OT environments. Perform threat hunting, root cause analysis, and detection improvement within a global cyber security team, collaborating with international colleagues.
View JobIncident Response Consultant (UK)
Quorum Cyber
Edinburgh, Scotland
Join a Microsoft-focused cybersecurity firm as an incident response consultant, investigating security incidents through host, network, and memory forensics, supporting SOC and MDR teams, and guiding customers through containment, remediation, and recovery.
View JobIncident Response Manager/DFIR Manager
Hays
London, England
Lead a regional DFIR team of six to seven professionals, managing complex ransomware and business email compromise investigations across endpoint, cloud and on-premises environments, while advising clients, legal advisers and insurers during live incidents.
View JobIntrusion Analyst (Remote, GBR)
CrowdStrike
Remote
Join a specialist threat hunting team defending enterprise customers against nation-state adversaries. Analyse endpoint telemetry, uncover intrusions, communicate findings to customers, and contribute to detection research and tooling development.
View JobDigital Forensic Investigator – Forensics (CTPSE)
Thames Valley Police
Newbury, England
Join a specialist counter-terrorism digital investigations team conducting forensic examinations of devices and cloud sources, producing court-ready reports and statements, and supporting high-priority national security operations across the South East.
View JobDigital Forensics Analyst
Computer Forensics Lab
London, England
A full-time, on-site London role conducting forensic analysis of mobile phones, computers and digital media. Responsibilities include evidence handling, malware analysis, data recovery and report writing, supporting legal and investigative clients.
View JobDigital Forensic Technician
Insolvency Service
Stratford, England
A government forensic computing unit seeks a technician to acquire and examine digital evidence for civil and criminal insolvency investigations, supporting field operations at business premises, search warrants and courts.
View JobIncident Response Lead (DFIR)
LT Harper Recruitment Group
England
Lead a cyber response team handling nationally significant incidents across government, CNI and enterprise. Combines hands-on digital forensics with operational leadership, covering the full incident lifecycle from triage and containment to recovery and client capability uplift.
View JobNMC Cyber Incident Responder (Digital Forensics)
Police Digital Service
Wigan, England
Lead and support cyber security incident investigations across UK policing, conducting forensic examinations of endpoints, memory and cloud environments, analysing digital evidence, and advising senior stakeholders on containment, remediation and response.
View JobIncident Response Specialist
Marcus Donald People
England
Join a banking-sector cyber security team as a contract incident response specialist, investigating security breaches, conducting digital forensics, and strengthening enterprise defences. Wednesday–Saturday schedule; predominantly remote with monthly London office visits.
View JobDigital Forensic Technician
The Insolvency Service
London, England
A government forensic computing unit seeks a technician to acquire and analyse digital evidence, support search warrants and investigations, maintain laboratory systems, and produce evidential reports and statements.
View JobExperienced Digital Forensic Specialist
Keith Borer Consultants
Durham, England
Join a leading forensic science consultancy in Durham as a digital forensics specialist, conducting mobile device examinations, producing expert reports, presenting evidence in court, and supporting ISO 17025 accreditation across a varied caseload.
View JobSenior Forensics Associate EMEA
Lighthouse Document Technologies Inc.
London, England
A senior digital forensics role delivering forensically sound ESI collections from endpoints, mobile devices and cloud sources, supporting investigations and litigation across onsite and remote engagements in the EMEA region.
View JobSenior Incident Response Consultant, Mandiant (Weekend team)
United Kingdom
Lead complex client-facing incident response engagements on a weekend shift pattern, conducting host, network, and cloud forensics, malware triage, and log analysis while mentoring junior consultants and reporting findings to executive audiences.
View JobManager/Assistant Manager Digital Forensics, Forensic & Financial Crime
Deloitte
London, England
Lead digital forensic investigations across commercial and public sector clients within an ISO 17025 accredited lab, managing data acquisition, analysis and reporting while mentoring junior team members and handling multiple concurrent matters.
View JobSenior Associate, Digital Forensics and Incident Response
Kroll
United Kingdom
Join a global DFIR team responding to 2,000+ incidents annually. Lead complex investigations into ransomware, data breaches and insider threats, analysing forensic evidence across endpoints, networks and cloud environments while advising senior stakeholders.
View JobConsultant, Digital Forensics and Incident Response
Control Risks
London, England
A London-based consultancy role delivering digital forensics, incident response and eDiscovery services to law firms, multinationals and government clients, acting as technical lead on cases and supporting business development efforts.
View JobAssociate Consultant, Digital Forensics and Incident Response
Control Risks
London, England
A London-based consultancy role supporting digital forensics and incident response engagements across data breach investigations, forensic evidence handling, and eDiscovery for law firms, multinationals, and government clients, with up to 25% international travel.
View JobSenior Consultant, Digital Forensics and Incident Response
Control Risks
London, England
Senior DFIR consultant role based in London, serving global clients including law firms, multinationals and government. Leads forensic investigations and cyber incident response engagements, with regional travel and business development responsibilities.
View JobDigital Forensic Senior Analyst
S-RM
London, England
A senior digital forensics analyst role based in London, conducting forensic preservation and analysis across Windows, Linux, macOS, iOS, Android and cloud platforms, delivering clear written reports to legal and senior stakeholders.
View JobCyber Incident Response – Senior Manager
LT Harper Recruitment Group
London, England
Lead complex cyber incident response engagements for a Risk Consulting practice, managing forensic investigations across disk, memory, network and logs, while developing client IR capabilities and mentoring technical practitioners.
View JobDigital Forensics and Incident Response (DFIR) Specialist – UK Remote
LevelBlue
United Kingdom
Join a global DFIR team conducting forensic investigations and incident response across endpoints, networks, and cloud platforms. Responsibilities include evidence collection, root-cause analysis, and producing clear, narrative-driven reports for technical and non-technical audiences.
View JobSenior Digital Forensic Investigator (NEROCU)
Northumbria Police
Sunderland, England
Lead a specialist Digital Forensic Unit tackling serious and organised crime, overseeing extraction and analysis of 2,000+ devices annually, managing a team, advising investigators, and presenting evidence in court.
View JobDigital Forensic Unit Technician (NEROCU)
Northumbria Police
Sunderland, England
Join a regional organised crime unit's Digital Forensic Unit, extracting and analysing data from over 2,000 electronic devices annually to support high-profile criminal investigations, court proceedings, and compliance with forensic accreditation standards.
View JobCyber Security Incident Manager
SEP2
England
Join a fast-growing UK cyber security specialist to lead DFIR engagements, manage incident response, coordinate analyst teams, produce post-incident reports, and onboard customers into a dedicated DFIR service. Remote-friendly with occasional travel to Leeds.
View JobDigital Forensic Technician
Serious Fraud Office (UK)
London, England
A hands-on digital forensics role within a government fraud investigation unit, involving forensic imaging, mobile device extraction, evidence acquisition, data analysis, and preparation of digital material for legal review platforms.
View JobSenior Incident Responder (DFIR)
Tesco
Welwyn Garden City, England
Join an in-house DFIR team conducting forensic analysis and incident response across on-premises and cloud environments. Lead threat hunts, support detection engineering, and drive automation to protect a large, complex retail technology estate.
View JobDigital Forensics & Incident Response Consultant
LevelBlue
United Kingdom
Join a global DFIR team conducting forensic investigations and incident response engagements across endpoints, networks, SaaS, and cloud platforms. Responsibilities span evidence collection, root cause analysis, and producing clear narrative reports for technical and non-technical audiences.
View JobDigital Forensic Professionals
Oscar
England
A specialist digital forensics organisation in Stratford-upon-Avon is seeking professionals at all levels — from junior analysts to senior specialists — with hands-on experience in computer, mobile and evidence analysis using industry-standard tools.
View JobInformation Security Analyst – SecOps Response
Starling
London, England
A hybrid security operations role supporting 24/7 incident response capabilities, requiring hands-on experience in cloud, endpoint, network and memory forensics, threat hunting, detection engineering, and tabletop exercise planning within a fintech environment.
View JobCyber Response & Recovery Manager (Reactive DFIR) – German Speaking
KPMG UK
London, England
Lead reactive DFIR engagements as case manager on medium to large incidents, conducting digital forensics and incident response, developing client IR capabilities, and managing cyber response tooling and playbooks for a Tier 1 UK provider.
View JobSenior Incident Response Consultant, Rapid Response
Sophos
United Kingdom
Lead incident response engagements for organisations experiencing cyberattacks, directing forensic investigations, conducting root cause analysis, identifying TTPs, and producing executive reports mapped to the MITRE ATT&CK framework for global customers.
View JobCyber Security Incident Response Analyst
IBM
Hursley, England
Join IBM's CSIRT team conducting forensic investigations and cyber incident analysis, including digital media examination, network traffic analysis, malware triage, SIEM log review, and evidence handling across heterogeneous environments.
View JobSenior Digital Forensics and Incident Response (DFIR) Consultant
Cypfer
London, England
Lead complex DFIR investigations for a global cybersecurity first-responder firm, conducting forensic analysis across Windows/Linux/virtual platforms, malware triage, threat hunting, and incident response for ransomware and cyber-extortion events.
View JobCyber Response & Recovery Manager – German Speaker
KPMG
London, England
Manages reactive DFIR engagements as case lead, conducting digital forensics across disk, memory, network and logs, advising clients on threat landscape, building IR capabilities, and developing internal tooling and runbooks.
View JobDigital Forensics and Incident Response (DFIR) Consultant
Cypfer
London, England
Consultant role covering end-to-end incident response and digital forensics, including forensic acquisition, Windows triage, malware analysis, IOC investigation, log review, and client-facing remediation for ransomware and cyber-extortion cases.
View JobDigital Forensics and Incident Response Analyst
Mishcon de Reya LLP
London, England
Join an NCSC/CREST-accredited cyber team as a first responder handling client cyber incidents, conducting forensic acquisition and analysis across platforms including mobile devices, and supporting containment, eradication and remediation activities.
View JobSenior Incident Response Security Consultant, Mandiant, Google Cloud
United Kingdom
Lead complex, high-profile incident response engagements for enterprise clients, conducting host and network forensics, malware triage, threat hunting, and log analysis while developing reports for technical and executive audiences.
View JobCyber Response & Recovery Assistant Manager (Reactive DFIR)
KPMG UK
London, England
Hands-on reactive DFIR assistant manager role within a Tier 1 UK incident response team, performing digital forensics across disk, memory, network and logs, managing smaller cases and supporting clients through complex cyber incidents including ransomware and network intrusions.
View JobSenior Security Engineer, Security Incident Response Team (SIRT) – EMEA
GitLab
Remote
Senior Security Engineer joining a global incident response team, leading high-severity investigations across cloud environments, building detection and automation capabilities, and applying DFIR methodologies within a 24/7 follow-the-sun model during EMEA hours.
View JobSenior DFIR Investigator
CFC
London, England
Lead complex digital forensics and incident response investigations across host, network and cloud environments. Analyse threat actor activity, produce forensic reports, mentor junior investigators, and deliver proactive cyber resilience services to global clients.
View JobPrincipal Consultant, Incident Response (Unit 42)
Palo Alto Networks
City Of London, England
Lead client-facing incident response engagements for Unit 42, performing host-based forensic analysis, log investigation, and data breach response across Windows, Linux, and macOS. Mentor junior staff and deliver actionable remediation recommendations to clients.
View JobCyber Response and Recovery – Assistant Manager (Reactive)
KPMG
London, England
Hands-on reactive DFIR role within a Tier 1 UK incident response team. Perform digital forensics, manage smaller IR cases, advise on threat landscape, support client IR capability building, and contribute to internal tooling and lab development.
View JobForensics Consultant
Lineal
London, England
Client-facing digital forensics consultant responsible for forensic data collection, processing and analysis across PCs, mobile devices, servers and cloud systems. Leads investigations end-to-end, advises on best practices and supports eDiscovery processes using tools such as EnCase, FTK and Cellebrite.
View JobCyber Response & Recovery – Senior Manager
KPMG UK
United Kingdom
Senior manager role leading cyber incident response and digital forensics engagements, managing a team of practitioners, developing IR capabilities, tools and runbooks, and advising clients on threat landscape and response maturity.
View JobCyber Response & Recovery – Senior Manager
KPMG
London, England
Senior Manager role leading cyber incident response and digital forensics engagements for clients. Responsibilities include hands-on forensic analysis, IR capability development, team leadership, runbook authoring, and client-facing advisory work across complex cyber incidents.
View JobCyber Security Consultant
Realtime Recruitment
Northern Ireland
Mid-level Cyber Incident Response Consultant role involving detecting, investigating and responding to cybersecurity incidents, conducting forensic analysis, managing containment and recovery, and producing technical reports for clients across enterprise environments.
View JobDigital Forensic Analyst
South Yorkshire Police
Sheffield, England
Join a police Digital Forensic Unit securing and analysing evidence from mobile phones and computers, presenting findings to courts, maintaining ISO17025 accreditation, and mentoring junior staff in a permanent Sheffield-based role.
View JobSenior Director | Digital Forensics & Investigations
FTI Consulting
London, England
Lead complex digital forensic investigations across devices, cloud and mobile platforms for corporate, legal and regulatory clients. Act as expert witness, mentor junior staff, and drive methodology development within a global DFIR practice.
View JobGet new DFIR jobs in your inbox
A weekly round-up of every new listing on the board — no noise, unsubscribe anytime.