Threat intelligence & incident response lead Work, Jobs in Leyland, Lan (with Salaries)

Cyber Digital Forensics & Incident Response Manager
Capgemini —Manchester
- Hybrid work
- Azure
- AWS
- Mentoring
Director, Digital Forensics & Incident Response (Global)
NCC Group —Manchester
- Full-time
- Hybrid work
- Sales
- Leadership
- Communication skills
- Annual leave
Quick apply
Workplace Operations Lead (TFM)
HM Revenue and Customs —Preston
- £45,544 - £49,523 a year
- Full-time
- Hybrid work
- English
- Presentation skills
- Contracts
- Work from home
1d
Cyber Digital Forensics & Incident Response Manager
Capgemini Sogeti —Manchester
- Hybrid work
- Azure
- AWS
- Mentoring
Senior Analyst - Tactical Intelligence
NCC Group —Manchester
- Full-time
- Hybrid work
- Scripting
- Python
- Annual leave
Quick apply
Information Security Engineer - Vulnerability Management
Starling —Manchester
- Full-time
- Hybrid work
- Management
- Java
- SQL
- Annual leave
- Employee discount
Quick apply
Senior SOC Analyst – Manchester
BAE Systems —Manchester
- Full-time
- Hybrid work
- Azure
- AWS
- Scripting
- Referral programme
7d
Lead Software Engineer - Agent Safety
Kraken —Manchester
- Full-time
- Hybrid work
- Master's degree
- AWS
- IT
Quick apply
6d
Senior Cloud Security Engineer (SecOps)
Beyond —Manchester
- Full-time
- Hybrid work
- Azure
- AWS
- Financial services
- Annual leave
- Employee assistance programme
Quick apply
Senior Manager, Product Security
Anaplan —Manchester
- Communication skills
Quick apply

I want to receive the latest job alerts for threat intelligence & incident response lead in leyland, lan

By signing in to your account, you agree to SimplyHired's Terms of Service and consent to our Cookie and Privacy Policy.

Cyber Digital Forensics & Incident Response Manager

Capgemini -
Manchester

Apply Now

Job details

Permanent

Qualifications

Azure
AWS
Incident response
Mentoring
GCIH

Full job description

About the job you’re considering

This is a Hybrid Role Onsite 2-3 Days Per Week

Work Location either Manchester or inverness

An excellent opportunity has arisen within our Team for a Digital Forensics & Incident Response (DFIR) Manager. DFIR (Digital Forensics and Incident Response) is a specialist cyber security capability which is responsible for delivering rapid, high‑impact incident response and investigation during significant cyber events, such as Malware or Ransomware attacks or Cyber security breaches.

The Digital Forensics and Incident Response Manager is a leadership position within Capgemini’s Cyber Defence Centre’s (CDC’s) team, this role will oversee the DFIR Service, taking responsibility for all aspects of service delivery, and the successful candidate will be one of the foremost technical experts for all aspects of cyber incident response, ensuring that the team are all suitably trained and that cyber incidents are handled in accordance with the requirements of our clients. You will manage a team of DFIR analysts and be responsible for the management of the services provided to our clients, ensuring they cover the key contractual deliverables/requirements and that clients are satisfied with the quality and performance of the services.

You will need to demonstrate experience of developing, managing and mentoring a Team and ensuring that appropriate resources are in place to deliver a first-class service, delivering against SLAs and KPIs.
You will also need excellent Stakeholder management skills including the ability to translate complex technical threats and vulnerabilities into executive-friendly insights that articulate potential business risks and recommended actions.

Who You’ll Work With

You’ll lead a close-knit team of DFIR analysts within a 24x7 on‑call model, Cyber Threat Intelligence (CTI) analysts and collaborating with DFIR, CDC, and client teams. You'll be surrounded by professionals who are passionate about cybersecurity and committed.

Hybrid working: The places that you work from day to day will vary according to your role, your needs, and those of the business; it will be a blend of Company offices, client sites, and your home; noting that you will be unable to work at home 100% of the time.

Your role

Lead and coordinate end-to-end cyber incident response activities, ensuring effective containment, eradication, and recovery during high-severity incidents
Oversee and perform digital forensic investigations, including evidence collection, preservation, and analysis across endpoint and cloud-based environments
Own the delivery of incident reporting and executive briefings, translating technical findings into business risk and actionable recommendations
Establish and maintain DFIR processes, playbooks, and runbooks, ensuring alignment with recognised standards such as NCSC CIR
Lead, mentor, and manage a team of DFIR analysts, ensuring operational readiness, on-call coverage, and delivery against SLAs and KPIs

You can bring your whole self to work. At Capgemini building an inclusive future is part of everyday life and will be part of your working reality. We have built a representative and welcoming environment, for everyone.

Your skills and experience

Experienced in managing a distributed team of DFIR specialists and related technical teams.
Strong experience leading cyber incident response, managing high-severity incidents and coordinating technical and stakeholder response
Hands-on expertise in digital forensics, including evidence collection and analysis across endpoint and cloud environments (e.g. AWS, Azure)
Ability to deliver clear incident reports and executive briefings, translating technical findings into business impact and actions
Experience developing and improving DFIR processes and playbooks, aligned to recognised frameworks such as NCSC CIR
Relevant industry certifications such as CREST (CPIA/CRIA) or SANS (GCIA, GCIH, GCFA).

We are a Disability Confident Employer

Capgemini is proud to be a Disability Confident Employer (Level 2) under the UK Government’s Disability Confident scheme. As part of our commitment to inclusive recruitment, we will offer an interview to all candidates who:

Declare they have a disability, and

Please opt in during the application process.

Your security clearance and pre-employment checks

If you are successfully offered this position, you will go through a series of pre-employment checks, including: identity, nationality (single or dual) or immigration status, employment history going back 3 continuous years, and unspent criminal record check (known as Disclosure and Barring Service)

Some roles will also require an additional level of security clearance:

Security Check (SC) Clearance:

To be successfully appointed to this role, it is a requirement to obtain Security Check (SC) clearance.

To obtain SC clearance, the successful applicant must have resided continuously within the United Kingdom for the last 5 years, along with other criteria and requirements.

Throughout the recruitment process, you will be asked questions about your security clearance eligibility such as, but not limited to, country of residence and nationality.

Some posts are restricted to sole UK Nationals for security reasons; therefore, you may be asked about your citizenship in the application process.

Make it real – what does it mean for you?

Flexibility to work your way
You will be encouraged to have a positive work-life balance. Our hybrid-first way of working means we embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements.

Your wellbeing
You’d be joining an accredited Great Place to work for Wellbeing in 2024. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions.

To help support wellbeing we have trained ‘Mental Health Champions’ across each of our business areas, and we have invested in wellbeing apps such as Thrive and Peppy.

Shape your path
You will be empowered to explore, innovate, and progress. You will benefit from Capgemini’s ‘learning for life’ mindset, meaning you will have countless training and development opportunities from thinktanks to hackathons, and access to 250,000 courses with numerous external certifications from AWS, Microsoft, Harvard ManageMentor, Cybersecurity qualifications and much more.

Shared energy
You’ll be bringing your unique skills and perspectives to the team, inspiring and taking inspiration from your teammates as you unlock value in everything you do. You’ll be joining a professional community of experts, who have got your back and will support you, every step of the way.

Why should you consider Capgemini?

Growing clients’ businesses while building a more sustainable, more inclusive future is a tough ask. When you join Capgemini, you’ll join a thriving company and become part of a collective of free-thinkers, entrepreneurs and industry experts. We find new ways technology can help us reimagine what’s possible. It’s why, together, we seek out opportunities that will transform the world’s leading businesses, and it’s how you’ll gain the experiences and connections you need to shape your future. By learning from each other every day, sharing knowledge, and always pushing yourself to do better, you’ll build the skills you want. You’ll use your skills to help our clients leverage technology to innovate and grow their business. So, it might not always be easy, but making the world a better place rarely is.

About Capgemini

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organisations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of over 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com

Apply Now

Refine Your Search

threat intelligence & incident response lead jobs in leyland, lan

Cyber Digital Forensics & Incident Response Manager

Director, Digital Forensics & Incident Response (Global)

Workplace Operations Lead (TFM)

Cyber Digital Forensics & Incident Response Manager

Senior Analyst - Tactical Intelligence

Information Security Engineer - Vulnerability Management

Senior SOC Analyst – Manchester

Lead Software Engineer - Agent Safety

Senior Cloud Security Engineer (SecOps)

Senior Manager, Product Security

I want to receive the latest job alerts for threat intelligence & incident response lead in leyland, lan

Explore jobs in more locations

About the job you’re considering

Your role

Your skills and experience

We are a Disability Confident Employer

Your security clearance and pre-employment checks

Make it real – what does it mean for you?

Why should you consider Capgemini?

About Capgemini

Jobseeker tools

Employer Tools

Browse

Stay Connected