> Markdown version of [/jobs/ext/2140270-sr-security-consultant-dfir](https://www.wearedevelopers.com/jobs/ext/2140270-sr-security-consultant-dfir). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Sr. Security Consultant, DFIR

- **Company:** Level Blue
- **Location:** UK
- **Experience:** Expert
- **Salary:** £49,087.0
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, Microsoft Azure, Software as a Service, Databases, Digital Forensics, Forensics Tools (Digital Forensics Software), Python (Programming Language), Log Analysis, Network Protocols, Oracle (Applications), Windows PowerShell, Data Logging, Scripting, Computer Networking Systems, Cyber Threat Analysis, Information Technology
- **Published:** August 20, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5848427040

## About the Role

Communicate effectively with stakeholders to provide updates and ensure alignment with incident response processes. Qualifications: Proven experience in DFIR.
Strong knowledge of digital forensics tools and techniques, including X-Ways, or similar forensic tooling.
Experience with incident response frameworks and methodologies, such as NIST, SANS, or similar.
Excellent analytical and problem-solving skills.
Strong understanding of network protocols, operating systems, and security technologies.
Excellent written and verbal communication skills.
Ability to work independently and manage multiple projects simultaneously.
Flexibility to support occasional travel and work outside standard business hours, including evenings and weekends, as required annually measured against a utilization target. The role also includes participation in an on-call schedule to support operational continuity and timely response to critical incidents. Preferred Qualifications: Bachelor's or Master's degree in Digital Forensics, Computer Science-focused or closely related field of study and expertise.
DFIR industry accepted certifications.
Knowledge of scripting languages (e.g., Python, PowerShell) for automation and analysis.
Knowledge of database formats for investigative and knowledge purposes.
Knowledge of Azure, AWS, Oracle, and/or GWP as many modern threats traverse enterprise cloud platforms and knowledge of these platforms is a necessity for modern incident response engagements. Education A high school diploma or equivalent is required; a college or university degree is a plus. Why Join LevelBlue?At LevelBlue, you're not just an employee-you're part of a team making a real difference in the world of cybersecurity. We foster a culture of innovation and creativity where your contributions are valued, and you'll have the support and resources to grow and thrive. This role is open to candidates legally authorized to work in the UK. At LevelBlue, we support flexible work and bring people together in person for key moments based on role, team, and business needs.

## Description

We are seeking a highly skilled and motivated Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. The ideal candidate will be responsible for investigating and responding to cybersecurity incidents, conducting digital forensic and incident response investigations, and being able to work independently against engagement milestones from forensics to log analysis to report writing. This role requires deep technical expertise, strong analytical skills, and the ability to work under pressure in a fast-paced environment.
Key Responsibilities: Digital Forensics & Incident Response:
Be able to lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery.
Analyse and investigate security breaches to determine the root cause and impact.
Conduct digital forensic science-based incident response investigations on a variety of digital devices, including servers and end user workstations, network systems, SaaS platforms that contain artifacts, logging, and data of investigative relevance.
Collect, preserve, and analyse digital evidence in accordance with legal and regulatory requirements.
Reporting and Documentation:
Be able to prepare detailed incident reports, including findings and properly authoring a story that does not just restate factual dates/times, but articulates a story of the incident for a non-technical audience.
Maintain accurate and thorough documentation of all incident response activities and forensic investigations.
Collaboration and Communication:
Internally, work closely with cross-functional teams inclusive of DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS, etc., LevelBlue services.
Externally, work closely with Client teams including IT, legal, compliance, and external vendors, to support expert delivery during engagements.


## Related Videos

- [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Progressive Delivery in Kubernetes](https://www.wearedevelopers.com/videos/949-progressive-delivery-in-kubernetes)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases)
- [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)