Lead Cyber Incident Response Consultant

The Role

This position leads complex cyber security incident investigations end to end, performing advanced digital forensics across Windows, Linux, macOS, and multi-cloud environments. Day to day involves analysing logs, network traffic, memory, and disk artefacts, maintaining chain-of-custody, and delivering clear technical and executive-level guidance to affected organisations.

Skills & Experience

Strong hands-on forensics experience across host, network, and memory analysis is essential, alongside familiarity with adversary TTPs and threat actor behaviours. Experience working within NCSC-aligned practices and Microsoft security tooling is advantageous. Candidates should be comfortable operating within an on-call rota and responding outside standard hours.

Who It Suits

This role suits an experienced incident responder ready to take ownership of high-stakes investigations and mentor others. Someone who thrives under pressure, communicates findings clearly to both technical and non-technical audiences, and is motivated by helping organisations recover from serious cyber incidents will find this role highly rewarding.