Remote DFIR Manager – Incident Response Lead (UK)

Forensic Focus; United Kingdom; Remote; GBP 85,000 - 120,000; Full time

Job summary

Forensic Focus seeks a UK Cyber Manager to lead DFIR engagements end-to-end, from evidence collection and forensic analysis to root-cause determination and client reporting. The role includes coordinating containment and recovery, mentoring junior staff, and liaising with executives and legal counsel during investigations.

The ideal candidate will have hands-on DFIR delivery experience, be proficient with X-Ways, and familiar with NIST or SANS frameworks, with strong report-writing and

Qualifications

• Proven hands-on DFIR delivery experience.
• Familiarity with frameworks like NIST or SANS.
• Strong analytical ability and knowledge of networks/operating systems.
• Polished report-writing and presentation skills.

Responsibilities

• Lead incident response engagements end-to-end from evidence collection to client reporting.
• Coordinate containment and recovery activities during investigations.
• Mentor junior staff and supervise analysts.
• Liaise with executives, legal counsel and other stakeholders.

Skills

DFIR delivery

X-Ways

NIST/SANS frameworks

Forensic reporting

Client communication

Tools

X-Ways

Job description

Forensic Focus seeks a UK Cyber Manager to lead DFIR engagements end-to-end, from evidence collection and forensic analysis to root-cause determination and client reporting. The role includes coordinating containment and recovery, mentoring junior staff, and liaising with executives and legal counsel during investigations.

The ideal candidate will have hands-on DFIR delivery experience, be proficient with X-Ways, and familiar with NIST or SANS frameworks, with strong report-writing and