KR

Manager, Incident Response

Kroll United Kingdom Posted 17 Oct 2026 Closing: 16 Nov 2026
Permanent Remote

Role Description & Technical Scope

Manager, Digital Forensics & Incident ResponseWhen a cyber incident strikes, clients need clarity, speed and confidence. Kroll’s DFIR experts respond to more than 2,000 incidents each year, combining deep technical expertise with commercial judgement to help organisations contain threats, understand their impact and move forward decisively. As a Manager, you’ll lead complex, high-profile investigations end to end, acting as the engagement manager clients, counsel and insurers rely on when it matters most.What You’ll DoLead investigations into ransomware, data breaches, insider threats and business email compromise from initial triage through containment, recovery and final reporting.Act as engagement manager: own scope, budget, resourcing and delivery quality, and serve as the primary client contact throughout the matter.Direct forensic analysis across endpoints, networks, cloud and enterprise systems, and review the work of the wider investigation team.Lead conversations with external legal counsel, insurers and brokers, including briefings, status calls and defensible written reporting.What We’re Looking ForYou are an experienced investigator and engagement leader, commercially astute and calm under pressure, with the judgement to direct a team, manage a client relationship and turn complex evidence into decisions clients can act on.5+ years’ experience in incident response, digital forensics or cyber investigations, including demonstrable ownership of end-to-end engagements.Deep technical strength in incident response, forensics, malware analysis or network security, with the credibility to direct and quality-assure others’ work.Proven experience leading discussions with legal counsel, insurers and executive stakeholders in high-pressure, privileged environments.Consulting or professional services background with strong commercial judgement; relevant certifications are advantageous.Why KrollWork on complex, high-profile incidents with recognised global DFIR experts.Own client relationships and engagement outcomes while developing the consultants around you.Help organisations respond to and recover from cyber crises.Ready to solve critical cyber challenges? We’d like to hear from you.Apply at careers.kroll.com.#LI-TM1#LI-RemoteFull timePosting Date:

Ready to apply for this cyber security position?

This opportunity is hosted on CV-Library. Click below to view full details and submit your application.

Key Details
  • Date Posted: 17 Oct 2026
  • Location: United Kingdom
  • Employment: Permanent
  • Workplace: Remote
  • Domain: Security, Risk, Restructuring Consulting
100% FREE CV BUILDER
Need an ATS CV for this role?

Optimize your cyber CV with ATS-friendly templates before submitting your application.

Build Free CV Now
Employer Profile
KR
Kroll
Verified Tech Employer

Enterprise technology firm or security consultancy operating across the UK digital defense ecosystem.

More Jobs at Kroll
Related Cyber Opportunities
Physical Security Operations Analyst 24/7 Incident Response
Amazon Inc. • , england, united kingdom
Azure Security Engineer - Cloud & Resilience
Okta Resourcing • , scotland, united kingdom
Lead Security Engineer: AppSec, GRC & AI (Remote Europe)
David Kennedy Recruitment • , england, united kingdom