Skip to main content
Posted 06 August, 2026

Incident Response Consultant - Mid to Principal - UK Wide

Circle Group
Manchester, ENG, GB Full Time

Job Description

Incident Response Consultant - Mid to Principal - UK WideUK Remote | Up to £95,000 + benefits | SC Eligible PrefA specialist opportunity for experienced Incident Response professionals looking to work across a varied mix of proactive and reactive Digital Forensics & Incident Response (DFIR) engagements.This is a hands-on consulting role where you will support organisations through cyber incidents while also helping them improve their readiness, resilience and response capability before incidents occur.Working remotely across the UK, you will join a team delivering high-quality DFIR services including incident investigation, containment, recovery support, forensic analysis, threat hunting and post-incident reviews. The role offers opportunities at both Consultant and Senior Consultant level, depending on your experience.You will work with customers during some of their most challenging security events, providing calm technical guidance, clear communication and practical recommendations throughout the incident lifecycle.Key responsibilities include:Supporting cyber incident response engagements from initial triage through investigation, remediation and recoveryConducting digital forensic analysis across endpoints, networks, cloud environments and enterprise platformsPerforming root cause analysis and identifying attacker activity, techniques and persistence mechanismsSupporting proactive services including incident readiness reviews, tabletop exercises and response planningDeveloping customer understanding of cyber risks, improving controls and strengthening response processesProducing clear technical reports and presenting findings to both technical and senior stakeholdersContributing to threat hunting, detection improvements and lessons learned activitiesSupporting the ongoing development of DFIR methodologies, tooling and capabilityYou will bring experience in incident response, digital forensics, threat investigation or a closely related cyber security consulting environment. Strong technical understanding of attacker behaviour, Windows and Linux investigations, enterprise networks, cloud environments and security tooling is highly desirable.Relevant experience may include:Incident Response / DFIR consultingDigital forensics and malware analysisThreat hunting and compromise assessmentSecurity operations or advanced investigation rolesExperience working with SIEM, EDR and forensic toolingCertifications such as GIAC, SANS, CREST, OSCP, CISSP or equivalent are beneficialRequirements:Based in the UK with full and permanent right to workEligible for UK Security Clearance (SC) as a minimumProven experience delivering incident response or forensic investigationsComfortable working directly with customers during high-pressure security incidentsStrong written and verbal communication skillsSalary is available up to £95,000 depending on experience, with opportunities available for both Consultant and Senior Consultant level professionals.If you are looking for a role that combines real-world incident response with proactive security improvement work, this is an opportunity to work on complex engagements and make a measurable impact for customers.You must have 5 years continuous UK residence in the UK. You can find me on Linkedin for direct connection.Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter - @Circle_Rec and LinkedIn - Circle Recruitment.TPBN1_UKTJ