Remote Digital Forensics & Incident Response Lead

APM Terminals; Maidenhead; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Maersk's Cyber team invites an experienced security professional to join a modern incident management and response function, combining digital forensics, threat hunting, detection engineering, and cyber security improvement.

You will investigate complex incidents across endpoints, cloud, and OT, deliver root cause analyses, support uplift projects, and mentor junior staff within a globally recognised logistics leader.

Qualifications

• 5+ years in SOC, CERT, IR or forensic investigations.
• Proficient in Windows and Linux forensics and artefacts.
• Experience with enterprise SIEM, EDR, and monitoring tools.
• Strong report writing and stakeholder communication.

Responsibilities

• Conduct digital forensic investigations across endpoint, cloud, and OT environments to support incident response and recovery activities.
• Perform threat hunting and behavioural analysis to proactively identify threats and malicious activity across the network.
• Deliver detailed forensic root cause analysis (RCA) and investigation findings to both technical and non-technical stakeholders.
• Support cyber security uplift projects and help embed new capabilities, processes, and technologies into operational teams.
• Collaborate with Cyber Operations teams to continuously improve detection, monitoring, and response capabilities.
• Support security incident management activities, including triage, investigation, containment, recovery, and post-incident reviews.
• Act as an escalation point for complex investigations and contribute to the development of cyber response capabilities and junior team members.

Skills

Digital forensics

Threat hunting

Incident response

Security reporting

Communication

Tools

X-Ways

EnCase

Autopsy

TimeSketch

Plaso

SIEM

Firewalls

Job description

Maersk's Cyber team invites an experienced security professional to join a modern incident management and response function, combining digital forensics, threat hunting, detection engineering, and cyber security improvement.

You will investigate complex incidents across endpoints, cloud, and OT, deliver root cause analyses, support uplift projects, and mentor junior staff within a globally recognised logistics leader.