LT Harper Recruitment Group
Cyber Incident Response - Senior Manager
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Incident Response – Senior Manager
Salary: £92,000 – £108,000 per annum
Remote / Hybrid - Onsite when needed
I’m recruiting for an experienced Cyber Incident Response Senior Manager to join a growing Cyber Response Services team within a leading Global Consulting practice. Cyber security continues to be a major area of investment and growth for the organization, making this an excellent opportunity for an established incident response professional looking to take on a senior role that combines hands-on technical work, operational leadership, client management and team development. You’ll lead the response to complex and business-critical cyber incidents, manage incident response practitioners and case managers, and work closely with senior cyber response leadership. The position also offers a clear route towards broader cyber response and service line leadership.
The Role
You’ll take ownership of complex cyber incident response engagements, helping clients navigate high-pressure situations such as ransomware attacks, data compromises and advanced network intrusions. You’ll lead clients through the full incident response lifecycle, including:
- Initial incident scoping and triage
- Establishing investigative priorities and response objectives
- Evidence identification and preservation
- Containment activities
- Forensic acquisition and evidence extraction
- Investigation and forensic analysis
- Eradication and remediation
- Recovery support
- Post-incident reviews and recommendations
Throughout an incident, you’ll manage technical resources, investigative priorities and client expectations while providing clear and pragmatic advice to senior stakeholders. Outside of live incidents, you’ll help organisations strengthen their cyber response capabilities. This could involve developing incident response plans, playbooks and runbooks, assessing response maturity, improving tooling and processes, and designing or facilitating cyber tabletop and scenario exercises. You’ll also play an important role in developing the wider Cyber Response capability, including methodologies, tooling, laboratory environments, operational processes and team development.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Responsibilities
- Lead complex cyber incident response and digital forensic engagements
- Manage investigations involving ransomware, data compromise and sophisticated network intrusions
- Perform and oversee forensic analysis of disks, volatile memory, network traffic, logs and other evidence sources
- Lead case managers and technical responders during rapid-response engagements
- Advise senior clients on relevant cyber threats and attacker techniques
- Support the development of forensic and incident response tooling
- Assess clients’ incident response maturity and recommend improvements
- Help organisations establish or enhance internal incident response functions
- Develop incident response plans, procedures, playbooks and runbooks
- Facilitate cyber incident tabletop and scenario exercises
- Scope and cost cyber response engagements
- Manage project finances, engagement delivery and risk
- Produce and review technical and executive-level reports
- Build and maintain senior client relationships
- Contribute to bids, proposals and RFP responses
- Mentor and develop junior and mid-level practitioners
- Improve internal methodologies, tooling and operational processes
Experience Required
My client is looking for someone with substantial experience in Cyber Incident Response and Digital Forensics, ideally with a track record of leading organizations through complex and potentially unstructured incidents. You should be comfortable rapidly establishing investigative priorities, directing technical teams and communicating effectively with senior stakeholders during high-pressure situations.
Relevant experience should include:
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Leading responses to complex cyber security incidents
- Strong digital forensics and incident investigation capabilities
- Ransomware and advanced network intrusion investigations
- Managing or leading rapid-deployment incident response teams
- Understanding attacker techniques, threat actors and the wider cyber threat landscape
- Strong knowledge of Windows, Active Directory, Linux and enterprise networking
- Understanding Windows and enterprise security controls
- Network security, traffic and log analysis
- Forensic acquisition, evidence preservation and evidential integrity
- Preservation and investigation of cloud-based evidence
- Experience with encrypted systems such as BitLocker, FileVault and/or LUKS
- Senior stakeholder and client management
Additional Requirements
Due to the nature of incident response work, you’ll need to:
- Be willing and able to obtain UK Security Check (SC) Clearance
- Participate in an on-call rota
- Work flexibly during critical incidents
- Travel at short notice when required
- Be comfortable with occasional assignments involving travel for up to 2–3 weeks
Why Consider It?
This is a genuinely senior opportunity within a growing cyber response capability where you can remain closely involved in sophisticated technical investigations while taking on greater responsibility for people, clients and service delivery. You’ll gain exposure to major cyber incidents and sophisticated threat activity while helping shape incident response methodologies, tooling and team capability. For an experienced incident response professional looking to combine technical expertise with leadership and client responsibility, this offers a strong progression route towards wider cyber response and service line leadership.
Salary: £92,000 – £108,000 per annum
Interested in discussing the opportunity? Please get in touch for a confidential conversation.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location