UK Cyber Manager, DFIR

Overview

In this DFIR Manager role, you lead hands-on incident response and forensic investigations for clients, guiding end-to-end delivery from discovery to reporting. You work closely with cross-functional teams and senior stakeholders to articulate defensible findings. You’ll mentor junior colleagues, refine SOPs, and ensure compliant, high-quality deliverables. This is a practitioner-led, client-facing position at a fast-paced, security-focused company with a strong emphasis on impact and resilience.

Pay / Benefits

• remote work
• flexible work arrangements
• supportive culture focused on growth
• equal opportunity employer
• opportunities for career development
• collaborative cross-functional environment

Responsibilities

• Lead and coordinate cybersecurity incident responses, including containment and recovery, with limited supervision
• Stay hands-on in delivery, investigating breaches to determine root cause and impact
• Perform digital forensics across servers, endpoints, networks, and SaaS platforms
• Collect, preserve, and analyze evidence in line with legal/regulatory requirements
• Support scoping and workplan development for engagements
• Provide supervision and mentoring to junior staff during investigations
• Prepare detailed incident reports and craft defensible narratives for technical and non-technical audiences
• Review deliverables for quality and contribute to SOP improvements
• Engage as primary client contact, communicating with executives, legal, compliance, insurers, and vendors
• Collaborate with DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS and other LevelBlue services

Key requirements

• Hands-on DFIR delivery experience
• Proven ability to present investigations to clients and senior stakeholders
• Strong knowledge of digital forensics tools and techniques (e.g., X-Ways)
• Experience with incident response frameworks (NIST, SANS)
• Analytical/problem-solving skills
• Understanding of networks, OS, and security tech
• Excellent written and verbal communication
• Ability to manage multiple engagements and work independently
• Experience supervising or mentoring juniors
• Willingness to travel occasionally and participate in on-call rotations

• strong communication
• client-facing confidence
• mentoring and teamwork
• digital forensics tooling (X-Ways)
• incident response methodologies (NIST/SANS)
• log analysis and digital evidence handling

…