LT Harper Recruitment Group
Cyber Incident Response
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Response / Incident Response, 3 x roles (DFIR, Recovery and Remediation, Security Operations Consulting)
Salary: £55 - £85k base – Excellent benefits
Location: London or Manchester
Working pattern: hybrid, around 60% of the week with clients or in the office, 40% elsewhere, including from home + on call
Clearance: current SC or DV clearance, or eligibility and willingness to obtain it.
I’m supporting a growing global consultancy that is looking to hire three people into its cyber response practice, one of a small number of UK Tier 1 incident response providers.
The roles
DFIR
You will deliver digital forensics and incident response on live cases, acting as junior case manager on smaller incidents and as part of a wider team on larger ones. Forensics across disk, volatile memory, network packets and log files. Between incidents, you will help clients build their own response capability through runbooks and playbooks, maturity assessments and table-top exercises.
Cyber Defence (Security Operations)
You will advise clients on incident management, vulnerability management and threat intelligence. Work includes designing operating models for threat intelligence teams, building attack surface monitoring at scale, and advising on Frontier AI use cases in cyber defence, largely with public sector, government, defence and healthcare clients at senior stakeholder level.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Cyber Manager, Response and Recovery
You will lead recovery workstreams after major incidents: Active Directory recovery and hardening, removing attacker persistence, patching and vulnerability remediation, network segmentation and firewall redesign, isolated recovery environments, backup validation and restore sequencing. You will convert incident findings into phased recovery and security improvement roadmaps.
What they are looking for
Across all three roles:
- A broad understanding of the cyber security threat landscape
- Strong technical grounding in computers and networks
- Proven experience of cyber security incidents and the response measures around them
- Excellent written and verbal communication, including with technical and non-technical stakeholders
- SC or DV clearance, or eligibility and willingness to obtain it
Role specific:
- DFIR: hands-on forensic analysis and incident management. CCIM, GCIH or CPIA welcome but not required
- Cyber Defence: consulting capability first and engineering second, with experience in government, defence or healthcare preferred
- Cyber Manager, Response and Recovery: strong cyber IR understanding, hands-on Windows Server, Active Directory, Linux, networking and cloud (Azure, AWS, Microsoft 365) at systems administrator level, plus ransomware, AD compromise or large-scale infrastructure recovery experience.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Degrees and certifications are treated as evidence of competence rather than as a gate. If you meet most but not all of the above, it is still worth a conversation.
Package
- Salary £55 - £85k base – Excellent benefits
- Investment in security certifications and structured training
- Access to nationally significant incidents, with exposure across government and critical infrastructure
- A defined route into senior cyber response and recovery leadership
This would suit someone who wants to work on complex incidents at the point clients need help most, and who enjoys translating technical detail into clear advice for both technical and senior audiences.
Please message me directly if you would like to discuss any of the three roles, or feel free to share this with someone in your network.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location