Hybrid DFIR & Incident Response Manager Lead & Mentor

Forensic Focus; Greater London; Hybrid; GBP 36,000 - 50,000; Full time

Job summary

Forensic Focus in London seeks an experienced Manager for Digital Forensics and Incident Response to lead high-profile DFIR engagements and mentor junior analysts. The role combines hands-on investigations with client-facing leadership in a hybrid London setting.

The ideal candidate has broad DFIR experience across Windows, macOS, Linux, iOS, and Android, plus GCFA/GCIH or CREST CPIA/CRIA certifications, and excellent communication skills for client consulting.

Qualifications

• DFIR experience across Windows, macOS, Linux, iOS and Android.
• Certifications such as SANS GCFA/GCIH or CREST CPIA/CRIA.
• Strong written and verbal communication skills and client consulting experience.

Responsibilities

• Manage and perform forensic investigations into cybersecurity incidents (network intrusions, malware, data breaches).
• Preserve evidence, conduct host and network analysis, and produce detailed reports.
• Act as an expert witness when required.

Skills

DFIR experience

Windows

macOS

Linux

iOS

Android

GCFA/GCIH

CREST CPIA/CRIA

Communication

Client consulting

Job description

Forensic Focus in London seeks an experienced Manager for Digital Forensics and Incident Response to lead high-profile DFIR engagements and mentor junior analysts. The role combines hands-on investigations with client-facing leadership in a hybrid London setting.

The ideal candidate has broad DFIR experience across Windows, macOS, Linux, iOS, and Android, plus GCFA/GCIH or CREST CPIA/CRIA certifications, and excellent communication skills for client consulting.