Incident Response Consultant (UK)

Forensic Focus; City of Edinburgh; Hybrid; GBP 58,000 - 90,000; Full time

Job summary

Forensic Focus is seeking an Incident Response Consultant (UK) to lead end-to-end cyber security investigations across Windows, Linux, macOS, and multi-cloud environments from Edinburgh. You will own workstreams in host, network, and memory forensics, performing log analysis, artefact examination, and evidence handling during active incidents.

The role requires practical DFIR experience with disk image analysis, network traffic review, and memory forensics, plus familiarity with Microsoft

Qualifications

• Practical expertise in digital forensics and incident response.
• Experience with disk image analysis, network traffic review, and memory forensics.
• Familiarity with Microsoft security technologies and telemetry essentials.

Responsibilities

• Handle end-to-end cyber security incident investigations across host, network, and memory forensics.
• Lead defined workstreams during incidents and coordinate with SOC, MDR, and threat intel teams.
• Ensure evidence handling and chain-of-custody standards are maintained throughout incidents.

Skills

Digital forensics

Incident response

Disk image analysis

Network traffic review

Volatile memory forensics

Microsoft security technologies

Job description

# Incident Response Consultant (UK)*Quorum Cyber***Edinburgh, Scotland**Mid · Full-time### The RoleThe consultant supports end-to-end cyber security incident investigations, taking ownership of defined workstreams across host, network, and memory forensics on Windows, Linux, macOS, and multi-cloud environments. Day-to-day work includes log analysis, artefact examination, TTP identification, evidence handling, and stakeholder engagement throughout active incidents.### Skills & ExperienceCandidates need practical expertise in digital forensics and incident response, including disk image analysis, network traffic review, and volatile memory forensics. Familiarity with Microsoft security technologies and telemetry is essential. Experience with threat intelligence, chain-of-custody standards, and AI-assisted IR workflows is advantageous.### Who It SuitsThis role suits a technically grounded IR or DFIR professional comfortable working across SOC, MDR, and threat intelligence teams. Those experienced in Microsoft-centric environments who want structured career development within a fast-growing, award-winning managed security services provider will find it a strong fit.Typical advertised salary forIncident Response roles in United Kingdom:**£58,000–£90,000**(median £70,000 — from33 recent listings analysed by Forensic Focus).Compare Incident Response salaries in United Kingdom →Learn More/Apply