Senior Digital Forensics Incident Responder (Hybrid)

Forensic Focus Limited; Wigan; On-site; GBP 36,000 - 52,000; Full time

Job summary

Police Digital Service in Wigan seeks an NMC Cyber Incident Responder (Digital Forensics) to lead investigations into ransomware, malware and unauthorized access within the National Management Centre. You will perform forensic acquisitions and analyses across endpoints, servers and cloud environments, delivering defensible findings to operational and legal audiences.

You’ll brief Chief Officers and senior IT leaders throughout incident lifecycles, blending deep technical forensics with

Qualifications

• Enterprise digital forensic investigations
• Endpoint and memory forensics
• Log analysis using EDR telemetry and SIEM platforms
• Windows internals and OS artefacts
• Attacker tradecraft and MITRE ATT&CK
• Forensic best-practice evidence handling and incident response lifecycle methodologies

Responsibilities

• Forensic acquisitions and analyses of endpoints, servers and cloud environments.
• Produce defensible findings for operational and legal audiences.
• Brief Chief Officers and senior IT leaders throughout incident lifecycles.

Skills

Digital forensics

Endpoint forensics

Memory forensics

Log analysis

EDR telemetry

SIEM

Windows internals

OS artefacts

MITRE ATT&CK

Incident response lifecycle

Tools

EDR

SIEM

Job description

Police Digital Service in Wigan seeks an NMC Cyber Incident Responder (Digital Forensics) to lead investigations into ransomware, malware and unauthorized access within the National Management Centre. You will perform forensic acquisitions and analyses across endpoints, servers and cloud environments, delivering defensible findings to operational and legal audiences.

You’ll brief Chief Officers and senior IT leaders throughout incident lifecycles, blending deep technical forensics with