Senior DFIR Consultant

UBDS

Senior DFIR Consultant at UBDS Group leading cyber incident investigations and providing expert guidance during incidents. Collaborating with SOC teams and refining incident response playbooks.

Posted 5/27/2026full-timeManchester • 🇬🇧 United KingdomSeniorWebsite

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityPython

About the role

Key responsibilities & impact

Lead end-to-end incident response activities for both external clients and internal environments, including identification, containment, eradication, and recovery
Conduct detailed digital forensic investigations across endpoints, networks, and cloud environments
Collaborate with SOC/IOC engineers to detect and respond to threats in real time
Act as a trusted advisor to external clients during cyber incidents, providing clear guidance and updates
Develop and refine incident response playbooks, procedures, and best practices for both client engagements and internal use
Provide expert guidance during major incidents, including stakeholder communication and reporting
Support proactive threat hunting initiatives in collaboration with SOC teams
Produce clear, structured forensic reports suitable for both technical and non-technical audiences
Ensure evidence is handled in line with legal and regulatory standards, maintaining chain of custody
Contribute to continuous improvement of cyber security posture through lessons learned and post-incident reviews (both client and internal)
Mentor and support junior SOC team members where required

Requirements

What you’ll need

Significant experience in Digital Forensics and Incident Response (DFIR) within enterprise or client-facing environments
Proven track record managing and leading complex cyber incident investigations
Experience working closely with Security Operations Centre (SOC) teams
Demonstrable experience delivering cyber security services to external clients
Strong knowledge of endpoint and network forensics tools
Experience with Security Information and Event Management (SIEM) platforms
Deep understanding of threat detection methodologies
Familiarity with Windows, and cloud environments (e.g. MS Azure / AWS)
Knowledge of malware analysis techniques and tools
Scripting or automation skills (e.g. Python, PowerShell) desirable
Eligible for UK SC Security Clearance
Willing to work from our Manchester office at least 3 days a week

Benefits

Comp & perks

Training – All team members are offered a number of options in terms of personal development, whether it is technical led, business acumen or methodologies. We want you to grow with us and to help us achieve more
Private medical cover for you and your spouse/partner, offered via Vitality
Discretionary bonus based on a blend of personal and company performance
Holiday – You will receive 25 Days holiday, plus 1 day for Birthday and 1 day for your work anniversary in addition to UK bank holidays
Electric Vehicle leasing with salary sacrifice
Contributed Pension Scheme
Death in service cover

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Digital ForensicsIncident ResponseThreat DetectionMalware AnalysisScriptingAutomationEndpoint ForensicsNetwork ForensicsCyber Security ServicesIncident Investigation

Soft Skills

LeadershipCommunicationMentoringCollaborationAdvisoryProblem SolvingReportingContinuous ImprovementStakeholder ManagementGuidance

Certifications

UK SC Security Clearance