Incident Response Consultant (UK)

The Role

The consultant supports end-to-end cyber security incident investigations, taking ownership of defined workstreams across host, network, and memory forensics on Windows, Linux, macOS, and multi-cloud environments. Day-to-day work includes log analysis, artefact examination, TTP identification, evidence handling, and stakeholder engagement throughout active incidents.

Skills & Experience

Candidates need practical expertise in digital forensics and incident response, including disk image analysis, network traffic review, and volatile memory forensics. Familiarity with Microsoft security technologies and telemetry is essential. Experience with threat intelligence, chain-of-custody standards, and AI-assisted IR workflows is advantageous.

Who It Suits

This role suits a technically grounded IR or DFIR professional comfortable working across SOC, MDR, and threat intelligence teams. Those experienced in Microsoft-centric environments who want structured career development within a fast-growing, award-winning managed security services provider will find it a strong fit.