Incident Response Consultant - Mid to Principal - UK Wide

A specialist opportunity for experienced Incident Response professionals looking to work across a varied mix of proactive and reactive Digital Forensics & Incident Response (DFIR) engagements. This is a hands-on consulting role where you will support organisations through cyber incidents while also helping them improve their readiness, resilience and response capability before incidents occur.

Working remotely across the UK, you will join a team delivering high-quality DFIR services including incident investigation, containment, recovery support, forensic analysis, threat hunting and post-incident reviews. The role offers opportunities at both Consultant and Senior Consultant level, depending on your experience. You will work with customers during some of their most challenging security events, providing calm technical guidance, clear communication and practical recommendations throughout the incident lifecycle.

Key responsibilities include:

• Supporting cyber incident response engagements from initial triage through investigation, remediation and recovery
• Conducting digital forensic analysis across endpoints, networks, cloud environments and enterprise platforms
• Performing root cause analysis and identifying attacker activity, techniques and persistence mechanisms
• Supporting proactive services including incident readiness reviews, tabletop exercises and response planning
• Developing customer understanding of cyber risks, improving controls and strengthening response processes
• Producing clear technical reports and presenting findings to both technical and senior stakeholders
• Contributing to threat hunting, detection improvements and lessons learned activities
• Supporting the ongoing development of DFIR methodologies, tooling and capability

You will bring experience in incident response, digital forensics, threat investigation or a closely related cyber security consulting environment. Strong technical understanding of attacker behaviour, Windows and Linux investigations, enterprise networks, cloud environments and security tooling is highly desirable.

Relevant experience may include:

• Incident Response / DFIR consulting
• Digital forensics and malware analysis
• Threat hunting and compromise assessment
• Security operations or advanced investigation roles
• Experience working with SIEM, EDR and forensic tooling
• Certifications such as GIAC, SANS, CREST, OSCP, CISSP or equivalent are beneficial

Requirements:

• Based in the UK with full and permanent right to work
• Eligible for UK Security Clearance (SC) as a minimum
• Proven experience delivering incident response or forensic investigations
• Comfortable working directly with customers during high-pressure security incidents
• Strong written and verbal communication skills

Salary is available up to £95,000 depending on experience, with opportunities available for both Consultant and Senior Consultant level professionals. If you are looking for a role that combines real-world incident response with proactive security improvement work, this is an opportunity to work on complex engagements and make a measurable impact for customers. You must have 5 years continuous UK residence in the UK.