Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead digital forensics and incident response investigations across various environments.
- Company: Join a global team tackling cyber threats and protecting clients.
- Benefits: Remote work, competitive salary, and opportunities for professional growth.
- Other info: Dynamic role with exposure to cutting-edge technologies and industry certifications.
- Why this job: Make a real difference in cybersecurity by helping clients recover from incidents.
- Qualifications: 3-5 years in digital forensics or incident response; strong project management skills.
The predicted salary is between 60000 - 80000 £ per year.
You will work as part of a global DFIR team responding to incidents such as ransomware, business email compromise, insider threats, data breaches, and advanced intrusions—helping clients contain threats, understand impact, and recover with confidence.
Key Responsibilities
- Lead and support digital forensics and incident response investigations across Windows, macOS, Linux, cloud, SaaS, and identity environments.
- Perform acquisition and analysis across endpoints, servers, cloud, SaaS, identity, and network telemetry while maintaining defensible chain-of-custody.
- Identify attacker tradecraft, determine root cause, assess scope and data-at-risk, and support threat actor eviction.
- Communicate effectively with all project stakeholders, including clients, outside counsel, insurers, and internal teams.
- Support containment, eradication, and recovery activities in coordination with client security teams and restoration partners.
Required Experience & Skills
- 3–5 years of hands-on experience in digital forensics, incident response, or security operations.
- Experience working across modern environments (EDR/XDR, SIEM, cloud, SaaS, identity platforms).
- Possess excellent project-management skills, with ability to communicate complex technical findings clearly to non-technical stakeholders.
- Comfortable working under pressure during live incidents, including occasional after-hours response.
Nice to have:
- Industry certifications such as GCFA, GCFE, GCIH, or similar.
- Experience delivering incident readiness services, such as compromise assessments, IRP/playbook development, tabletops, and cyber range activities.
- Exposure to expert witness support or litigation-related investigations.
DFIR Manager, Cyber Risk in City of Westminster employer: Kroll, LLC
Contact Detail:
Kroll, LLC Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land DFIR Manager, Cyber Risk in City of Westminster
✨Tip Number 1
Network, network, network! Get out there and connect with folks in the DFIR space. Attend industry events, webinars, or even local meetups. The more people you know, the better your chances of landing that dream job.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your past incident response cases or any relevant projects. This will give potential employers a taste of what you can bring to the table and set you apart from the competition.
✨Tip Number 3
Don’t just apply blindly! Tailor your approach for each role. Research the company and its culture, and make sure to highlight how your experience aligns with their needs. We want to see that you’re genuinely interested in working with us.
✨Tip Number 4
Follow up after interviews! A quick thank-you email can go a long way. It shows your enthusiasm for the position and keeps you fresh in the interviewer's mind. Plus, it’s a great chance to reiterate why you’re the perfect fit for the role.
We think you need these skills to ace DFIR Manager, Cyber Risk in City of Westminster
Some tips for your application 🫡
Tailor Your CV: Make sure your CV is tailored to the DFIR Manager role. Highlight your experience in digital forensics and incident response, especially any hands-on work with Windows, macOS, Linux, and cloud environments. We want to see how your skills match what we're looking for!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Use it to explain why you're passionate about cyber risk and how your background makes you a great fit for our team. Don’t forget to mention any relevant certifications or experiences that set you apart.
Showcase Your Communication Skills: Since you'll be communicating with various stakeholders, it's crucial to demonstrate your ability to convey complex technical information clearly. In your application, give examples of how you've successfully communicated findings to non-technical audiences in the past.
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows us you’re keen on joining the StudySmarter family!
How to prepare for a job interview at Kroll, LLC
✨Know Your Stuff
Make sure you brush up on your digital forensics and incident response knowledge. Be ready to discuss specific tools and techniques you've used in past roles, especially in environments like EDR/XDR, SIEM, and cloud platforms. This will show that you’re not just familiar with the theory but have practical experience.
✨Communicate Clearly
Since you'll need to explain complex technical findings to non-technical stakeholders, practice how you would break down intricate concepts into simple terms. Think about examples from your past where you successfully communicated during a crisis or incident.
✨Show Your Project Management Skills
Be prepared to talk about your project management experience. Highlight any instances where you led a team through an incident response or digital forensics investigation. Use the STAR method (Situation, Task, Action, Result) to structure your answers.
✨Stay Calm Under Pressure
Given the nature of the role, it’s crucial to demonstrate your ability to work under pressure. Share experiences where you handled high-stress situations effectively, especially during live incidents. This will reassure them that you can maintain composure when it matters most.