Incident Response Consultant

Forensic Focus

United Kingdom

Remote

GBP 58,000 - 90,000

Full time

14 days+

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

Quorum Cyber in the United Kingdom is seeking an Incident Response Consultant to own and drive investigations into cybersecurity incidents, taking responsibility for specific workstreams and coordinating with SOC, MDR and threat intelligence teams.

You will analyse logs, disk images, memory and network traffic, applying host, network and memory forensics across Windows, Linux and macOS and multi‑cloud platforms.

Typical advertised salary ranges from £58,000 to £90,000 (median around £70,000).

Qualifications

  • Experience in host, network and memory forensics across Windows, Linux and macOS.
  • Knowledge of Microsoft security tooling and telemetry.
  • Understanding of evidence handling and chain-of-custody practices.
  • Familiarity with threat actor TTPs.

Responsibilities

  • Analyse logs, disk images, memory and network traffic to determine attacker actions and impact.
  • Liaise with SOC, MDR and threat intel teams throughout the investigation lifecycle.

Skills

Host forensics
Network forensics
Memory forensics
Multi-cloud forensics
Microsoft security tooling
Telemetry
Evidence handling
Chain of custody
Threat actor TTPs

Tools

Microsoft Defender
Azure Sentinel

Job description

# Incident Response Consultant*Quorum Cyber***United Kingdom**Mid · Full-time### The RoleThe consultant supports investigations into cyber security incidents, taking ownership of specific workstreams. Duties include analysing logs, disk images, memory and network traffic to determine attacker actions and impact, while liaising with SOC, MDR and threat intelligence teams throughout the investigation lifecycle.### Skills & ExperienceCandidates need practical experience in host, network and memory forensics across Windows, Linux, macOS and multi-cloud platforms, alongside knowledge of Microsoft security tooling and telemetry. Understanding of evidence handling, chain-of-custody practices and threat actor TTPs is essential.### Who It SuitsThis suits an analyst with solid forensic and incident investigation experience who wants to work within a Microsoft-focused security environment, collaborating closely with SOC and threat intelligence teams while developing skills in AI-assisted investigation workflows.Typical advertised salary forIncident Response roles in United Kingdom:**£58,000–£90,000**(median £70,000 — from33 recent listings analysed by Forensic Focus).Compare Incident Response salaries in United Kingdom →Learn More/Apply
Get your free, confidential resume review.

or drag and drop your file here.

Similar jobs

Similar jobs worth comparing

Incident Response Consultant (UK)
Incident Response Consultant (UK)

Forensic Focus • City of Edinburgh

Hybrid
GBP 58,000 - 90,000
Incident Response Investigator & Forensic Specialist
Incident Response Investigator & Forensic Specialist

Forensic Focus • United Kingdom

Remote
GBP 58,000 - 90,000
Senior Incident Response & Digital Forensics Analyst
Senior Incident Response & Digital Forensics Analyst

Berenice Photography • Greater London

On-site
GBP 58,000 - 90,000
Microsoft‑Focused Incident Response Consultant
Microsoft‑Focused Incident Response Consultant

Quorum Cyber • City of Edinburgh

On-site
GBP 70,000 - 110,000
Excellent salary
World-class benefits
Access to latest technology
+1
Principal Consultant, Digital Forensics & Incident Response
Principal Consultant, Digital Forensics & Incident Response

Forensic Focus • Reading

Hybrid
GBP 58,000 - 90,000
Remote Incident Response Specialist (Microsoft Security)
Remote Incident Response Specialist (Microsoft Security)

Quorum Cyber • United Kingdom

Remote
GBP 70,000 - 100,000
World class benefits
Incident Response Specialist
Incident Response Specialist

Forensic Focus Limited • England

On-site
GBP 53,000 - 90,000
Incident Response Analyst - Technology Vendor
Incident Response Analyst - Technology Vendor

Hamilton Barnes • United Kingdom

Remote
GBP 45,000 - 55,000
Fully remote work
Ongoing training
Career progression
+1
Incident Response Consultant (UK)
Incident Response Consultant (UK)

Quorum Cyber • United Kingdom

On-site
GBP 70,000 - 100,000
World class benefits
Incident Response Consultant (UK)
Incident Response Consultant (UK)

Quorum Cyber • City of Edinburgh

On-site
GBP 70,000 - 110,000
Excellent salary
World-class benefits
Access to latest technology
+1