About the job
Hybrid role onsite 2-3 days per week. Work location: Manchester or Inverness.
Digital Forensics & Incident Response (DFIR) Manager – a leadership position within Capgemini’s Cyber Defence Centre (CDC) team. You will oversee the DFIR service, manage a team of DFIR analysts, and ensure delivery of rapid, high‑impact incident response and investigation during significant cyber events such as malware or ransomware attacks or cyber‑security breaches.
Responsibilities
- Lead and coordinate end‑to‑end cyber incident response activities, ensuring effective containment, eradication, and recovery during high‑severity incidents.
- Oversee and perform digital forensic investigations, including evidence collection, preservation, and analysis across endpoint and cloud‑based environments.
- Own the delivery of incident reporting and executive briefings, translating technical findings into business risk and actionable recommendations.
- Establish and maintain DFIR processes, playbooks, and runbooks, ensuring alignment with recognised standards such as NCSC CIR.
- Lead, mentor, and manage a team of DFIR analysts, ensuring operational readiness, on‑call coverage, and delivery against SLAs and KPIs.
Qualifications
- Experienced in managing a distributed team of DFIR specialists.
- Strong experience leading cyber incident response, managing high‑severity incidents and coordinating technical and stakeholder response.
- Hands‑on expertise in digital forensics, including evidence collection and analysis across endpoint and cloud environments (e.g. AWS, Azure).
- Ability to deliver clear incident reports and executive briefings, translating technical findings into business impact and actions.
- Experience developing and improving DFIR processes and playbooks, aligned to recognised frameworks such as NCSC CIR.
- Relevant industry certifications such as CREST (CPIA/CRIA) or SANS (GCIA, GCIH, GCFA).
Disability Confident Employer
Capgemini is a Level 2 Disability Confident Employer under the UK Government’s Disability Confident scheme. We offer an interview to all candidates who declare they have a disability and meet the minimum essential criteria for the role.
Security Clearance
To be appointed, a successful candidate must obtain Security Check (SC) clearance, which requires continuous residence in the UK for the last five years and may involve additional checks. Some roles are restricted to UK nationals for security reasons.
#J-18808-Ljbffr…