Cyber Incident Forensic Lead (Digital Policing)

PDS Cyber Services; Wigan; Hybrid; GBP 55,000 - 65,000; Full time

Benefits offered by this job

28 days annual leave + bank holidays

Remote GP and mental health support

Excellent pension scheme and life-asso

One paid volunteering day per year

Job summary

PDS Cyber Services in the United Kingdom is recruiting an NMC Cyber Incident Responder (Digital Forensics) to lead and support investigations into cyber security incidents affecting UK policing. The role combines digital forensics, incident response and stakeholder engagement to identify, contain and investigate threats.

You will conduct forensic examinations of compromised systems, analyse evidence across endpoints, servers and cloud, and guide remediation efforts.

Qualifications

• Experience conducting digital forensic investigations within enterprise environments.
• Experience performing endpoint and memory forensic analysis during cyber security incidents.
• Experience investigating ransomware, malware, unauthorised access, and data compromise incidents.
• Ability to collect, preserve and analyse digital evidence whilst maintaining evidential integrity.
• Strong understanding of Windows internals, operating system artefacts and attacker tradecraft.
• Experience communicating technical findings to senior stakeholders.
• Strong knowledge of incident response lifecycle and cyber investigation methodologies.
• Experience analysing logs, EDR telemetry, SIEM data and forensic artefacts to evaluate root cause and impact.

Responsibilities

• Lead and support investigations into cyber security incidents across UK policing.
• Perform forensic analysis of endpoints, servers, cloud to evaluate scope and impact.
• Support containment, eradication and recovery with evidence-based recommendations.
• Develop methodologies, playbooks and procedures aligned to incident response frameworks.
• Acquire, preserve and analyse digital evidence with evidential integrity.
• Analyse OS artefacts, logs, memory, network data to support investigations.
• Produce findings for operational, legal and executive audiences.
• Stay updated on emerging forensic tools and techniques.

Skills

Digital forensics

Incident response

Windows internals

Memory forensics

Evidence handling

Stakeholder communication

Threat intelligence awareness

Analytical thinking

Job description

PDS Cyber Services in the United Kingdom is recruiting an NMC Cyber Incident Responder (Digital Forensics) to lead and support investigations into cyber security incidents affecting UK policing. The role combines digital forensics, incident response and stakeholder engagement to identify, contain and investigate threats.

You will conduct forensic examinations of compromised systems, analyse evidence across endpoints, servers and cloud, and guide remediation efforts.