Digital Forensics and Incident Response Analyst

The Role

This position sits within a specialist cyber risk and investigations team, where the analyst serves as a first responder to client-reported cyber incidents. Day-to-day work covers threat investigation, containment, and eradication, alongside supporting internal security operations and contributing to NCSC-accredited incident response and exercising service lines.

Skills & Experience

Candidates should be confident triaging incoming incidents and comfortable working within NCSC Cyber Incident Response and Cyber Incident Exercising accredited frameworks. Experience in digital forensics and incident response is essential, and familiarity with CREST-recognised standards and methodologies will be expected given the team’s accreditations.

Who It Suits

This role suits a technically grounded DFIR professional who thrives in a fast-paced, client-facing environment and can handle complex, sensitive investigations with sound ethical judgement. Those who enjoy variety — spanning corporate clients, legal contexts, and internal security work — across organisations of all sizes will find this role particularly rewarding.