Capgemini
Cyber Digital Forensics & Incident Response Manager
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Digital Forensics & Incident Response (DFIR) Manager – Hybrid Role (Manchester or Inverness)
About the Role
This is a Hybrid Role requiring Onsite Work for 2-3 Days Per Week, based either in Manchester or Inverness.
A senior opportunity exists within our Team for a Digital Forensics & Incident Response (DFIR) Manager. DFIR (Digital Forensics and Incident Response) is a critical cybersecurity function responsible for delivering rapid, high-impact incident response and investigation during major cyber events, such as ransomware or malware attacks, or security breaches.
This is a leadership position within Capgemini’s Cyber Defence Centre (CDC) team. You’ll oversee the DFIR Service, ensuring expert-level technical governance and maintaining a first-class response capability. The successful candidate will provide strategic leadership to deliver exceptional service to clients by executing high-stakes incident response while mentoring DFIR analysts.
As the DFIR Manager, you’ll drive delivery against SLAs and KPIs, ensuring technical expertise underpins incident response efforts. Strong stakeholder management and ability to translate complex cyber threats into actionable business insights are essential.
Who You’ll Work With
- Lead a 24x7 on-call team of DFIR analysts alongside Cyber Threat Intelligence (CTI) specialists
- Collaborate with DFIR peers, CDC teams, and clients
- Work in a principal-driven environment of cybersecurity professionals committed to protecting organisations
Hybrid Working Workspread will include onsite visits to company offices, client sites, and limited remote work from home. Full-time remote fibre is not permitted.
Your Responsibilities
You will:
- Lead and coordinate end-to-end cyber incident response, including containment, eradication, and recovery.
- Oversee digital forensic investigations, ensuring evidence collection and analysis across endpoint and cloud-based environments (AWS, Azure).
- Own incident reporting and executive briefings, translating technical findings into actionable business risk assessments.
- Develop, maintain, and improve DFIR processes, playbooks, and runbooks aligned with recognised standards (NCSC CIR).
- Mentor and manage a team of DFIR specialists, ensuring operational readiness, on-call reliability, and SLA compliance.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Your Skills and Experience
The role expects:
- Experience leading distributed DFIR teams and managing related technical resources.
- Hands-on expertise in digital forensics and incident response, including evidence analysis in modern environments.
- Proven ability to deliver clear incident reports and executive briefings with business impact insights.
- Familiarity with DFIR frameworks (e.g., NCSC CIR) and industry certifications:
- CREST (CPIA, CRIA)
- SANS (GCIA, GCIH, GCFA)
- Equivalent recognised credentials for digital forensics and investigation.
Our Commitment
At Capgemini, declarations of disability are always met with opportunity. As a Disability Confident Employer (Level 2), we guarantee an interview for candidates who declare a disability and meet the minimum criteria.
We will also conduct pre-employment security checks, including:
- Identity/nationality verification (including dual citizenship status)
- Employment history (3 years continuous checks)
- Unspent criminal record confirmation (Disclosure & Barring Service check)
Security Clearance Requirement This role requires UK Security Check (SC) clearance. Eligibility includes prior five-year uninterrupted residence in the UK. Applicants may be asked to discuss citizenship status during the application process.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Make it Real – What This Means for You
Flexibility & Wellbeing
- Hybrid-first approach, balancing work from home, office, and client sites.
- Flexible working requests for all UK employees.
- Recognised as a Great Place to Work for Wellbeing, supporting mental health via initiatives like Mental Health Champions, and digital tools such as Thrive and Peppy wellness apps.
Learning and Growth
- A "learning for life" culture, offering access to 250,000 courses, including cybersecurity, AWS, Microsoft CompTIA, and more.
- Innovation opportunities, such as hackathons, thinktanks, and mentorship programs.
Shared Energy
- Join Capgemini’s global community of 420,000+ professionals and effortlessly connect with experts across industry, innovation, and collaboration.
Why Capgemini?
- Transformative mission: Use technology to reimagine what’s possible for clients while driving inclusive sustainability.
- Join a collective of industry leaders: Work with entrepreneurs, AI specialists, and cyber experts who push boundaries.
- Shape your future: Build sought-after skills, gain real-world connections, and grow alongside organisations at the forefront of industry change.
About Capgemini
A nearly 60-year old, responsible, AI-powered business transformation partner, Capgemini provides:
- End-to-end services and solutions across strategy, technology, design, engineering, and business operations.
- Local expertise in over 50 countries, with €22.5bn global revenue in 2023.
- A mission to bridge technology and human potential, striving to transform industries in a sustainable and inclusive manner.
Learn more: Make it real | www.capgemini.com
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills