Manager, Incident Response

Location: United Kingdom

Manager, Digital Forensics & Incident Response

When a cyber incident strikes, clients need clarity, speed and confidence. Kroll’s DFIR experts respond to more than 2,000 incidents each year, combining deep technical expertise with commercial judgement to help organisations contain threats, understand their impact and move forward decisively. As a Manager, you’ll lead complex, high-profile investigations end to end, acting as the engagement manager clients, counsel and insurers rely on when it matters most.

What You’ll Do

• Lead investigations into ransomware, data breaches, insider threats and business email compromise from initial triage through containment, recovery and final reporting.
• Act as engagement manager: own scope, budget, resourcing and delivery quality, and serve as the primary client contact throughout the matter.
• Direct forensic analysis across endpoints, networks, cloud and enterprise systems, and review the work of the wider investigation team.
• Lead conversations with external legal counsel, insurers and brokers, including briefings, status calls and defensible written reporting.

What We’re Looking For

You are an experienced investigator and engagement leader, commercially astute and calm under pressure, with the judgement to direct a team, manage a client relationship and turn complex evidence into decisions clients can act on.

• 5+ years’ experience in incident response, digital forensics or cyber investigations, including demonstrable ownership of end-to-end engagements.
• Deep technical strength in incident response, forensics, malware analysis or network security, with the credibility to direct and quality-assure others’ work.
• Proven experience leading discussions with legal counsel, insurers and executive stakeholders in high-pressure, privileged environments.
• Consulting or professional services background with strong commercial judgement; relevant certifications are advantageous.

Why Kroll

• Work on complex, high-profile incidents with recognised global DFIR experts.
• Own client relationships and engagement outcomes while developing the consultants around you.
• Help organisations respond to and recover from cyber crises.

Ready to solve critical cyber challenges? We’d like to hear from you.

Apply at careers.kroll.com.

#LI-TM1

#LI-Remote