Overview

Digital Forensics and Incident Response Engineer

Location: UK (Multiple locations considered). Job Type: Permanent. Location: England

Role: A leading cyber response organisation that is recognised as one of the UK's nine Tier 1 incident responders is looking for a Digital Forensics and Incident Response Engineer to join its Cyber Response Services team. This role offers the opportunity to work on high-impact cyber incidents across a diverse client base, with access to advanced tooling and professional development.

Location: UK (Multiple locations considered) • Permanent

Role Overview

The successful candidate will support clients in managing and recovering from cyber security incidents. The role combines strategic coordination with hands-on technical investigation, with a strong emphasis on both digital forensics and incident response.

Responsibilities

• Coordinate and lead cyber incident response activities, including participation in an on-call rota.
• Conduct forensic analysis of digital evidence (e.g., disk images, memory captures, network traffic, and log files).
• Advise clients on the current cyber threat landscape and relevant attack methodologies.
• Support client engagements through reporting, implementation, and issue resolution.
• Contribute to structured responses for proposals and bids.

Qualifications

• Demonstrable experience in both digital forensics and incident response.
• Strong technical background in computing, networking, and scripting/programming.
• Broad understanding of cyber threats, attack vectors, and mitigation strategies.
• Familiarity with forensic and security tools.
• Excellent communication and stakeholder engagement skills.

Desirable Qualifications

• Certifications such as CREST Certified Incident Manager (CCIM), GIAC Certified Incident Handler (GCIH), or equivalent.
• Degree or MSc in Information Security, IT, or a relevant STEM discipline.
• Eligibility for UK government security clearance (SC/DV) is advantageous.

What\'s Offered

• Opportunity to work on nationally significant cyber incidents.
• Access to cutting-edge tools and continuous professional development.
• A collaborative and high-performing team environment.

Carbon60, Lorien & SRG - The Impellam Group STEM Portfolio are acting as an Employment Business in relation to this vacancy.