Cyber Incident Response Specialist (Cloud & DFIR)

Ubds-Group; Manchester; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

Private medical cover

Discretionary bonus

25 Days holiday + Birthday + work-ann.

EV salary sacrifice

Contributed Pension

Death in service

Job summary

UBDS Group is seeking an experienced Cyber Incident Response Consultant to join our SIOC, based in London or Manchester. You will lead and perform digital forensics, investigations and incident response for complex customer environments, focusing on Microsoft and AWS and working with SIEM/EDR tooling.

You will mentor junior staff, contribute to playbooks and runbooks, and help grow our managed services capability through evidence-based improvements and post-incident reviews.

Qualifications

• Hands-on experience in cyber incident response and DFIR.

Responsibilities

• Lead or support customer-facing cyber incident response engagements from investigation to containment, eradication, recovery and reporting.
• Investigate ransomware, malware, phishing, account compromise and unauthorised access.
• Conduct digital forensic investigations across endpoints, servers, cloud, and network infrastructure.
• Analyse logs, telemetry and IOC to define incident scope and root cause.
• Use EDR, SIEM and forensic tooling to reconstruct attack timelines.
• Advise on containment decisions and remediation priorities.
• Produce incident reports with findings, timelines and remediation recommendations.
• Present findings to technical teams, customers and senior stakeholders.
• Develop incident response playbooks and runbooks; contribute to exercises and improvements.

Skills

Incident response

DFIR

SOC/SIOC

EDR/SIEM

Digital forensics

Customer-facing

Mentoring

Education

Certifications e.g. CRIA/GCIH/GCFA/GCFE/SC-200

Tools

Velociraptor

KAPE

Autopsy

Volatility

Defender XDR/ Defender for Endpoint (Desirable)

Job description

UBDS Group is seeking an experienced Cyber Incident Response Consultant to join our SIOC, based in London or Manchester. You will lead and perform digital forensics, investigations and incident response for complex customer environments, focusing on Microsoft and AWS and working with SIEM/EDR tooling.

You will mentor junior staff, contribute to playbooks and runbooks, and help grow our managed services capability through evidence-based improvements and post-incident reviews.