Kroll
Manager, Incident Response
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Manager, Digital Forensics & Incident Response
When a cyber incident strikes, clients need clarity, speed and confidence. Kroll’s DFIR experts respond to more than 2,000 incidents each year, combining deep technical expertise with commercial judgement to help organisations contain threats, understand their impact and move forward decisively. As a Manager, you’ll lead complex, high-profile investigations end to end, acting as the engagement manager clients, counsel and insurers rely on when it matters most.
What You’ll Do
- Lead investigations into ransomware, data breaches, insider threats and business email compromise from initial triage through containment, recovery and final reporting.
- Act as engagement manager: own scope, budget, resourcing and delivery quality, and serve as the primary client contact throughout the matter.
- Direct forensic analysis across endpoints, networks, cloud and enterprise systems, and review the work of the wider investigation team.
- Lead conversations with external legal counsel, insurers and brokers, including briefings, status calls and defensible written reporting.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What We’re Looking For
You are an experienced investigator and engagement leader, commercially astute and calm under pressure, with the judgement to direct a team, manage a client relationship and turn complex evidence into decisions clients can act on.
- 5+ years’ experience in incident response, digital forensics or cyber investigations, including demonstrable ownership of end-to-end engagements.
- Deep technical strength in incident response, forensics, malware analysis or network security, with the credibility to direct and quality-assure others’ work.
- Proven experience leading discussions with legal counsel, insurers and executive stakeholders in high-pressure, privileged environments.
- Consulting or professional services background with strong commercial judgement; relevant certifications are advantageous.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Why Kroll
- Work on complex, high-profile incidents with recognised global DFIR experts.
- Own client relationships and engagement outcomes while developing the consultants around you.
- Help organisations respond to and recover from cyber crises.
Ready to solve critical cyber challenges? We’d like to hear from you.
Apply at careers.kroll.com [https://careers.kroll.com/en].
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location