Digital Forensics and Incident Response (DFIR) Specialist - UK Remote

LevelBlue reduces risk and builds lasting resilience so organizations can innovate and advance their mission with confidence. As the world’s most analyst-recognized and largest pure-play managed security services provider, LevelBlue elevates client outcomes that matter: stronger defense, faster response, and sustained business continuity. LevelBlue combines AI-powered security operations, advanced threat intelligence, and elite human expertise to provide the most comprehensive portfolio of strategic advisory, managed security, offensive security, and incident response services.
Position Summary:
We are seeking a highly skilled and motivated Digital Forensics and Incident Response (DFIR) Specialist to join our Global LevelBlue DFIR team. The ideal candidate will be responsible for investigating and responding to cybersecurity incidents, conducting digital forensic and incident response investigations, and being able to work independently against engagement milestones from forensics to log analysis to report writing. This role requires deep technical expertise, strong analytical skills, and the ability to work under pressure in a fast-paced environment.
Key Responsibilities:

Digital Forensics & Incident Response:
Be able to lead and coordinate responses to cybersecurity incidents, including identification, containment, eradication, and recovery.
Analyse and investigate security breaches to determine the root cause and impact.
Conduct digital forensic science-based incident response investigations on a variety of digital devices, including servers and end user workstations, network systems, SaaS platforms that contain artifacts, logging, and data of investigative relevance.
Collect, preserve, and analyse digital evidence in accordance with legal and regulatory requirements.
Reporting and Documentation:
Be able to prepare detailed incident reports, including findings and properly authoring a story that does not just restate factual dates/times, but articulates a story of the incident for a non-technical audience.
Maintain accurate and thorough documentation of all incident response activities and forensic investigations.
Collaboration and Communication:
Internally, work closely with cross-functional teams inclusive of DFIR, Advisory, Testing, Threat Intelligence, MDR/MSS, etc., LevelBlue services.
Externally, work closely with Client teams including IT, legal, compliance, and external vendors, to support expert delivery during engagements.
Communicate effectively with stakeholders to provide updates and ensure alignment with incident response processes.

Qualifications:

Proven experience in DFIR.Strong knowledge of digital forensics tools and techniques, including X-Ways, or similar forensic tooling.