Remote Cyber Forensics & Incident Response Specialist

A.P. Moller - Maersk; Maidenhead; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Flexible remote working arrangements

Job summary

Maersk’s Cyber team is seeking an experienced professional to lead digital forensic investigations and incident response across endpoint, cloud, and OT environments. You will work on threat hunting, detection engineering, and forensic analysis to strengthen security posture in a globally recognised organisation.

You will communicate complex findings clearly to stakeholders, contribute to cyber uplift initiatives, and support incident management activities from triage to post-incident reviews.

Qualifications

• Proven experience conducting enterprise-scale digital forensic investigations across Windows and Linux.
• Strong knowledge of forensic artefacts including event logs, registry analysis, browser artefacts, file systems, persistence mechanisms, lateral movement techniques, and file-less attacks.
• Experience with threat hunting, security operations, incident investigation, and security technologies such as SIEM platforms, firewalls, and monitoring solutions.
• Minimum of 5 years of experience within a SOC, CERT, incident response, or forensic investigation environment, with the ability to manage competing priorities in fast-paced situations.
• Demonstrated ability to communicate complex technical findings clearly through reports, executive summaries, and stakeholder engagement.

Responsibilities

• Conduct digital forensic investigations across endpoint, cloud, and OT environments to support incident response and recovery activities.
• Perform threat hunting and behavioural analysis to proactively identify threats and malicious activity across the network.
• Deliver detailed forensic root cause analysis (RCA) and investigation findings to both technical and non-technical stakeholders.
• Support cyber security uplift projects and help embed new capabilities, processes, and technologies into operational teams.
• Collaborate with Cyber Operations teams to continuously improve detection, monitoring, and response capabilities.
• Support security incident management activities, including triage, investigation, containment, recovery, and post-incident reviews.
• Act as an escalation point for complex investigations and contribute to the development of cyber response capabilities and junior team members.

Skills

Digital forensics

Threat hunting

Incident response

Communication skills

Continuous improvement mindset

Tools

X-Ways

EnCase

Autopsy

TimeSketch

Plaso

Job description

Maersk’s Cyber team is seeking an experienced professional to lead digital forensic investigations and incident response across endpoint, cloud, and OT environments. You will work on threat hunting, detection engineering, and forensic analysis to strengthen security posture in a globally recognised organisation.

You will communicate complex findings clearly to stakeholders, contribute to cyber uplift initiatives, and support incident management activities from triage to post-incident reviews.