UK Cyber Manager – DFIR

The Role

This practitioner-led position involves leading incident response engagements end-to-end, from evidence collection and forensic analysis to root cause determination and client reporting. The manager coordinates containment and recovery efforts, mentors junior staff, and liaises with executives, legal counsel and other stakeholders throughout investigations.

Skills & Experience

Candidates need proven hands-on DFIR delivery experience, proficiency with forensic tools such as X-Ways, and familiarity with frameworks like NIST or SANS. Strong analytical ability, knowledge of networks and operating systems, and polished report-writing and presentation skills are essential.

Who It Suits

Ideal for an experienced DFIR professional comfortable working independently under pressure, confident presenting findings to senior and legal audiences, and ready to supervise junior analysts while remaining actively involved in technical investigations.