Digital Forensics & Incident Response Analyst

Berenice Photography; Maidenhead; Hybrid; GBP 36,000 - 50,000; Full time

Job summary

A.P. Moller - Maersk in Maidenhead, United Kingdom, is seeking an experienced Digital Forensics & Incident Response Analyst. You will investigate across Windows, Linux, cloud and OT, supporting triage through post-incident review in a hybrid, full-time role.

The ideal candidate brings enterprise-scale DFIR experience, strong artefact knowledge, and hands-on use of X-Ways, EnCase, Autopsy, Timesketch and Plaso. SIEM and cloud forensics are advantageous.

Qualifications

• Proven enterprise-scale DFIR experience.
• Strong knowledge of forensic artefacts (registry, event logs, persistence, fileless attacks).
• Hands-on use of DFIR tools and memory forensics is a plus.

Responsibilities

• Conduct DFIR investigations across Windows, Linux, cloud and OT environments.
• Support incident response lifecycle from triage to post-incident review.
• Mentor junior team members and contribute to detection uplift projects.

Skills

DFIR

X-Ways

EnCase

Autopsy

Timesketch

Plaso

SIEM

Cloud forensics

Memory forensics

Tools

X-Ways

EnCase

Autopsy

Timesketch

Plaso

Job description

# Digital Forensics & Incident Response Analyst*A.P. Moller - Maersk***Maidenhead, England**Hybrid · Mid · Full-time### The RoleThe analyst conducts digital forensic investigations across Windows, Linux, cloud, and operational technology environments, supporting the full incident response lifecycle from triage through to post-incident review. Day-to-day work includes threat hunting, behavioural analysis, forensic root cause analysis, and contributing to detection engineering and security uplift projects.### Skills & ExperienceCandidates need proven enterprise-scale DFIR experience, strong knowledge of forensic artefacts — including registry, event logs, persistence mechanisms and fileless attacks — and hands-on use of tools such as X-Ways, EnCase, Autopsy, Timesketch and Plaso. Experience with SIEM platforms and cloud or memory forensics is advantageous.### Who It SuitsThis role suits an experienced DFIR practitioner who is comfortable operating independently on complex investigations, can communicate findings clearly to technical and non-technical stakeholders, and is motivated to mentor junior team members while continuously improving security capabilities within a large, globally distributed organisation.Typical advertised salary forDigital Forensics roles in United Kingdom:**£36,000–£50,000**(median £43,000 — from65 recent listings analysed by Forensic Focus).Compare Digital Forensics salaries in United Kingdom →Learn More/Apply