> Markdown version of [/jobs/ext/728980-cyber-digital-forensics-incident-response-manager](https://www.wearedevelopers.com/jobs/ext/728980-cyber-digital-forensics-incident-response-manager). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Digital Forensics & Incident Response Manager - **Company:** Capgemini - **Location:** Inverness, UK (Remote available) - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing, Cyber Security, Computer Telephony Integration, Digital Forensics, Cloud Platform System, Malware, Cyber Threat Analysis, SC Clearance - **Published:** June 29, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=64f8e9149a91e8ec ## About the Role Do you have experience in Mentoring?, * Experienced in managing a distributed team of DFIR specialists and related technical teams. * Strong experience leading cyber incident response, managing high-severity incidents and coordinating technical and stakeholder response * Hands-on expertise in digital forensics, including evidence collection and analysis across endpoint and cloud environments (e.g. AWS, Azure) * Ability to deliver clear incident reports and executive briefings, translating technical findings into business impact and actions * Experience developing and improving DFIR processes and playbooks, aligned to recognised frameworks such as NCSC CIR * Relevant industry certifications such as CREST (CPIA/CRIA) or SANS (GCIA, GCIH, GCFA). We are a Disability Confident Employer Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government's Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who: * Declare they have a disability, and Meet the minimum essential criteria for the role. *, To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements. ## Description An excellent opportunity has arisen within our Team for a Digital Forensics & Incident Response (DFIR) Manager. DFIR (Digital Forensics and Incident Response) is a specialist cyber security capability which is responsible for delivering rapid, high-impact incident response and investigation during significant cyber events, such as Malware or Ransomware attacks or Cyber security breaches. The Digital Forensics and Incident Response Manager is a leadership position within Capgemini's Cyber Defence Centre's (CDC's) team, this role will oversee the DFIR Service, taking responsibility for all aspects of service delivery, and the successful candidate will be one of the foremost technical experts for all aspects of cyber incident response, ensuring that the team are all suitably trained and that cyber incidents are handled in accordance with the requirements of our clients. You will manage a team of DFIR analysts and be responsible for the management of the services provided to our clients, ensuring they cover the key contractual deliverables/requirements and that clients are satisfied with the quality and performance of the services. You will need to demonstrate experience of developing, managing and mentoring a Team and ensuring that appropriate resources are in place to deliver a first-class service, delivering against SLAs and KPIs. You will also need excellent Stakeholder management skills including the ability to translate complex technical threats and vulnerabilities into executive-friendly insights that articulate potential business risks and recommended actions. Who You'll Work With You'll led a close-knit team of DFIR analysts within a 24x7 on-call model, Cyber Threat Intelligence (CTI) analysts and collaborating with DFIR, CDC, and client teams. You'll be surrounded by professionals who are passionate about cybersecurity and committed. Hybrid working: The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time. Your role * Lead and coordinate end-to-end cyber incident response activities, ensuring effective containment, eradication, and recovery during high-severity incidents * Oversee and perform digital forensic investigations, including evidence collection, preservation, and analysis across endpoint and cloud-based environments * Own the delivery of incident reporting and executive briefings, translating technical findings into business risk and actionable recommendations * Establish and maintain DFIR processes, playbooks, and runbooks, ensuring alignment with recognised standards such as NCSC CIR * Lead, mentor, and manage a team of DFIR analysts, ensuring operational readiness, on-call coverage, and delivery against SLAs and KPIs You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) ## Related Articles - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Best Companies to Work For in The UK: Top 25 Companies in 2023 ](https://www.wearedevelopers.com/magazine/186-best-companies-to-work-for-in-the-uk-top-25-companies-in-2023) - [Best Job Boards for Remote Work for Developers](https://www.wearedevelopers.com/magazine/290-best-job-boards-for-remote-work-for-developers)