Cyber Incident Response Manager

The Role

This position involves leading technical analysis during cyber security incidents and data breaches, managing client engagements from initial response through to recovery. Day-to-day work includes producing investigation reports, developing detection content for SecOps environments, and coordinating across threat intelligence, threat hunting, and ethical hacking teams.

Skills & Experience

Candidates should bring hands-on incident response experience, including familiarity with human-operated ransomware, APT intrusions, and state-affiliated threat actors. Experience with detection engineering, SOAR playbook development, and SecOps modernisation is valued. Working knowledge of NCSC frameworks and structured investigation methodologies is also relevant.

Who It Suits

This role suits an experienced incident response professional who is comfortable operating in high-pressure, client-facing environments and managing complex engagements spanning corporate espionage, cyber crime, and nation-state intrusions. Those who thrive working across multidisciplinary technical teams and communicating clearly at all organisational levels will excel here.