Cyber Incident Response

The Role

Three positions are available within a UK Tier 1 cyber response practice: one focused on digital forensics and incident response across disk, memory, network and log sources; one advising clients on security operations, threat intelligence and AI-enabled defence; and one leading post-incident recovery, including Active Directory hardening and remediation roadmaps.

Skills & Experience

Candidates need a strong technical grounding in computers and networks, a broad understanding of the current threat landscape, and proven hands-on cyber security incident experience. Relevant expertise spans forensic analysis, vulnerability management, attack surface monitoring, network segmentation, and recovery planning. Current SC or DV clearance, or eligibility to obtain it, is required.

Who It Suits

These roles suit experienced cyber security professionals who are comfortable working in high-pressure incident environments, engaging with senior stakeholders, and operating in a hybrid consultancy model. Those with a background in public sector, government, defence or healthcare contexts will find the client portfolio particularly well aligned to their experience.