Cyber Manager, DFIR

Job  :
United Kingdom Pay: GBP 95000 - 122000 (Salary)
Posted:

Pay Type:

Salary Level Blue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, Level Blue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. Level Blue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.

Position Summary:

We are seeking a highly skilled and motivated Digital Forensics and Incident Response (DFIR) Manager to join our Global Level Blue DFIR team. This is a practitioner-led, client facing role for an experienced DFIR professional with a strong delivery background. The ideal candidate will be more 'hands on' and responsible for leading the response to cybersecurity incidents and conducting digital forensic and incident response investigations end-to-end, from forensics to log analysis to report writing and presenting findings to clients clearly, confidently and defensibly.

This role requires deep technical expertise, sound judgement, strong analytical skills, and the ability to work under pressure in a fast-paced environment.

Key Responsibilities:

Hands on Digital Forensics & Incident Response:
Lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery, managing engagements and work streams with limited supervision. Remain hands-on in delivery, analyzing and investigating security breaches to determine root cause and impact. Conduct digital forensic science-based incident response investigations across a variety of digital devices, including servers and end user workstations, network systems and SaaS platforms that contain artifacts, logging, and data of investigative relevance.

Collect, preserve, and analyze digital evidence in accordance with legal and regulatory requirements. Support the scoping of engagements and development of workplans. Delegate and supervise tasks for junior colleagues, providing guidance and mentoring during engagements. Reporting and Documentation:
Prepare detailed incident reports, including findings and properly authoring a story that does not just restate factual dates/times, but articulates a clear and defensible narrative of the incident for both technical and non-technical audiences. Review and quality control deliverables produced by others. Maintain accurate and thorough documentation of all incident response activities and forensic investigations. Contribute to refining and developing SOPs to improve our services and capabilities.

Collaboration and Communication:
Act as a primary point of contact for clients during engagements, engaging independently with senior stakeholders including executives, IT, legal, compliance, insurers and external vendors. Present findings eloquently and defensibly, including under scrutiny from legal counsel and other parties. Build trusted advisor relationships with clients and identify opportunities for further engagement. Internally, work closely with cross-functional teams including DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS, and other Level Blue services.

Qualifications:

Proven, hands-on experience in DFIR delivery. Demonstrable experience presenting investigative findings to clients and senior stakeholders. Strong knowledge of digital forensics tools and techniques, including X-Ways, or similar forensic tooling.

Experience with incident response frameworks and methodologies, such…