UK Cyber Manager – DFIR

Forensic Focus; United Kingdom; Remote; GBP 85,000 - 120,000; Full time

Job summary

Forensic Focus seeks a UK Cyber Manager to lead DFIR engagements end-to-end, from evidence collection and forensic analysis to root-cause determination and client reporting. The role includes coordinating containment and recovery, mentoring junior staff, and liaising with executives and legal counsel during investigations.

The ideal candidate will have hands-on DFIR delivery experience, be proficient with X-Ways, and familiar with NIST or SANS frameworks, with strong report-writing and

Qualifications

• Proven hands-on DFIR delivery experience.
• Familiarity with frameworks like NIST or SANS.
• Strong analytical ability and knowledge of networks/operating systems.
• Polished report-writing and presentation skills.

Responsibilities

• Lead incident response engagements end-to-end from evidence collection to client reporting.
• Coordinate containment and recovery activities during investigations.
• Mentor junior staff and supervise analysts.
• Liaise with executives, legal counsel and other stakeholders.

Skills

DFIR delivery

X-Ways

NIST/SANS frameworks

Forensic reporting

Client communication

Tools

X-Ways

Job description

# UK Cyber Manager – DFIR*LevelBlue***United Kingdom**Remote · Manager · Full-time### The RoleThis practitioner-led position involves leading incident response engagements end-to-end, from evidence collection and forensic analysis to root cause determination and client reporting. The manager coordinates containment and recovery efforts, mentors junior staff, and liaises with executives, legal counsel and other stakeholders throughout investigations.### Skills & ExperienceCandidates need proven hands-on DFIR delivery experience, proficiency with forensic tools such as X-Ways, and familiarity with frameworks like NIST or SANS. Strong analytical ability, knowledge of networks and operating systems, and polished report-writing and presentation skills are essential.### Who It SuitsIdeal for an experienced DFIR professional comfortable working independently under pressure, confident presenting findings to senior and legal audiences, and ready to supervise junior analysts while remaining actively involved in technical investigations.