Senior DFIR Lead — Incident Response & Digital Forensics UK

Trustwave Holdings, Inc.; United Kingdom; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

LevelBlue in the United Kingdom seeks a hands-on DFIR Manager to lead client engagements from forensics to reporting. You will stay hands-on in delivery, directing investigations across servers, workstations, networks and cloud platforms.

You will present findings to executives and legal teams, mentor junior staff, and work with cross-functional groups to refine SOPs. The role requires occasional travel and participation in an on-call schedule.

Qualifications

• Proven hands-on experience delivering DFIR engagements.
• Experience presenting findings to clients and senior stakeholders.
• Strong knowledge of digital forensics tools and techniques (X-Ways or equivalent).
• Experience with incident response frameworks (NIST/SANS).
• Excellent analytical and problem-solving, written and verbal communication skills.
• Ability to manage multiple engagements independently.
• Experience supervising or mentoring junior colleagues.
• Willingness to travel and on-call duties.

Responsibilities

• Lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery.
• Remain hands-on in delivery, analyzing and investigating security breaches to determine root cause and impact.
• Conduct digital forensic investigations across servers, workstations, networks, and cloud platforms.
• Collect, preserve, and analyze digital evidence per legal/regulatory requirements.
• Support scoping engagements and develop workplans.
• Delegate and supervise tasks for junior colleagues; provide guidance and mentoring.
• Prepare detailed incident reports with clear, defensible narratives for technical and non-technical audiences.
• Review and quality control deliverables; maintain thorough documentation.

Skills

Proven hands-on DFIR delivery

Experience presenting findings to high

Analytical and problem-solving skills

Written and verbal communication

Independent working & multi-engagement

Mentoring junior staff

Travel and on-call flexibility

Education

Bachelor's or Master's in Digital Forensics or related

DFIR industry certifications

Tools

X-Ways Forensic

Job description

LevelBlue in the United Kingdom seeks a hands-on DFIR Manager to lead client engagements from forensics to reporting. You will stay hands-on in delivery, directing investigations across servers, workstations, networks and cloud platforms.

You will present findings to executives and legal teams, mentor junior staff, and work with cross-functional groups to refine SOPs. The role requires occasional travel and participation in an on-call schedule.