Hands-On UK DFIR Incident Response Manager

LevelBlue, LLC.; United Kingdom; On-site; GBP 90,000 - 130,000; Full time

Job summary

LevelBlue is seeking a highly skilled DFIR Manager to lead the response to cybersecurity incidents and conduct end-to-end digital forensic investigations. You will stay hands-on in delivery, analyze breaches, and present findings to clients and senior stakeholders.

The role requires deep technical expertise, strong judgement, and the ability to work under pressure in a fast-paced environment. Occasional travel and on-call duties apply.

Qualifications

• Proven, hands-on DFIR delivery experience.
• Experience presenting findings to clients and senior stakeholders.
• Knowledge of digital forensics tools and techniques including X-Ways.
• Experience with incident response frameworks such as NIST or SANS.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents with limited supervision.
• Remain hands-on in delivery while guiding engagements.
• Conduct digital forensic investigations across devices and environments.
• Collect, preserve, and analyze digital evidence in line with legal requirements.
• Prepare detailed incident reports with clear, defensible narratives.

Skills

DFIR delivery

Client presentations

Incident response leadership

Analytical problem-solving

Network OS security knowledge

Written and verbal communication

Independent work

Mentoring juniors

Travel/on-call flexibility

Education

Bachelor's or Master's in Digital Forensics / CS

Tools

X-Ways

Job description

LevelBlue is seeking a highly skilled DFIR Manager to lead the response to cybersecurity incidents and conduct end-to-end digital forensic investigations. You will stay hands-on in delivery, analyze breaches, and present findings to clients and senior stakeholders.

The role requires deep technical expertise, strong judgement, and the ability to work under pressure in a fast-paced environment. Occasional travel and on-call duties apply.