Jobs
>
London

    Manager, Digital Forensics and Incident Response - London, United Kingdom - Aon

    Aon
    Aon London, United Kingdom

    3 weeks ago

    Default job background
    Description

    Posting Description

    Manager, Digital Forensics & Incident Response (DFIR)

    Are you a Cyber Security professional with experience in Digital Forensic and Incident response? Are you looking for tremendous exposure to a wide range of different cases and technologies, to be recognised for your accomplishments, while making a real impact? If yes, we would love to hear from you

    Aon are recruiting for a Manager – DFIR to join our team. This is a hybrid role, meaning the flexibility to work from home and in our London office.

    If this sounds like you, but perhaps the commute is too far- please still get in touch

    Aon is in the business of better decisions

    At Aon, we shape decisions for the better to protect and enrich the lives of people around the world.

    As an organisation, we are united through trust as one inclusive, diverse team, and we are passionate about helping our colleagues and clients succeed.

    What the day will look like

    As Manager, you are expected to bring extensive experience in the cybersecurity industry to bear on your casework. You will work at the direction of a Director or Managing Director in the unit to scope, coordinate, and provide peerless service on client cases-- which might require analysis of any technology used today: mobile devices, laptops and workstations, servers, networking switches, IoT devices, or cloud-based accounts and infrastructure. You will be expected to perform daily tasks associated with cyber breach response and investigations. As Manager, you are responsible for augmenting and strengthening your personal DFIR skill set, as well as helping develop the skills of the entire DFIR team.

  • Support the most complex forensic analyses handled by the firm.
  • Investigate network intrusions and other cybersecurity incidents to determine the cause and extent of the breach. Includes ability to perform host-based and network-based analysis across all major operating systems and network device platforms.
  • Preserve, harvest and analyse data from electronic data sources, including laptop and desktop computers, servers, and mobile devices.
  • Produce high-quality oral and written work product, presenting complex technical matters clearly and concisely.
  • Form and articulate expert opinions based on analysis.
  • Possess the experience, credibility, and integrity to perform as an expert witness.
  • Consult with and take direction from supervisors, engagement managers, and clients regarding case investigation and status.
  • Support the mentorship and technical development of junior Digital Forensics staff.
  • Investigate instances of malicious code and documents to determine attack vectors and payloads.
  • Develop and refine policies and procedures for forensic and malware analyses.
  • Research, develop, and recommend hardware and software needed for incident response and help develop and maintain policies and procedures to analyse digital evidence.
  • Participate in technical meetings and working groups to address issues related to cybersecurity and incident preparedness and ability to create targeted remediation plans for clients who have been compromised.

    • How this opportunity is different

    We are the only team in the market that has the scope and breadth of services to offer clients in any area of the cyber life cycle. If you want to work on some of the highest profile and complex cases out there, we are that first responder. With teams in our state of the art DFIR labs, as well as virtual, your work will vary from day to day responding to breaches, nation state attacks, ransomware, just to name a few. The team works closely together to ensure learning, growth and career development. And we invest in you, in the form of mentorship and training budgets to attend security training and conferences.

    Skills and experience that will lead to success

  • Digital forensics / incident response certification(s) such as SANS certifications (GCFA, GCIH etc), CREST certifications (CPIA, CRIA , or equivalent.
  • Deep experience with most common operating systems (Windows, macOS, Linux, iOS, Android) and their file systems (ext3/4, HFS+, APFS, NTFS, exFAT, .
  • Proficiency with industry-standard DFIR toolsets, such as X-Ways, EnCase, Axiom, Cellebrite, FTK and Volatility.
  • Proficiency with database querying and analysis.
  • Experience with cloud infrastructures for the enterprise, such as Amazon Web Services, G Suite, Office 365, and Azure.
  • Experience with conducting log analysis of large datasets.
  • Experience with command line tools (grep, sed, awk, python, and other programming languages.
  • Familiarity with computer system hardware and software installation and troubleshooting.
  • Well-developed analytic, qualitative, and quantitative reasoning skills and demonstrated creative problem-solving abilities.
  • Proficiency with MS Office Applications, and familiarity with Windows, Macintosh and Linux operating systems.

    • Preferred Experience

  • Strong work ethic and motivation, with a demonstrated history of ability to lead a team and develop talent. Even stronger analytic, quantitative, and creative problem-solving abilities.
  • Interest in building intellectual capital for the firm by writing blogs and creating internal tools for analysis.
  • Ability to anticipate and respond to changing priorities and operate effectively in a dynamic, demand-based environment, requiring flexibility and responsiveness to client matters and needs.
  • Strong verbal and written communication skills.
  • Must be able to work collaboratively across departments and physical locations.
  • Participation in technical meetings and working groups to address issues related to malware security, vulnerabilities, and issues of cybersecurity and preparedness.
  • A high level of professionalism in all areas of performance.
  • A constantly developed DFIR skill set, and proficiency with industry standard tools and practices, through outside training and research.
  • Comfort with intermittent periods of travel, evening and weekend hours.
  • Cygnet Health Care

    Incident Response Officer

    2 weeks ago

    Cygnet Health Care London, United Kingdom

    We are looking for an experienced Incident Response Officer to join our team at Cygnet Health Care. · Cygnet Health Care have been providing a national network of specialist mental health services for more than 30 years. · With us, you'll have the chance to progress your career a ...

  • Arc IT Recruitment

    Incident Response Specialist

    2 weeks ago

    Arc IT Recruitment London, United Kingdom

    **Incident Response Specialist - SOC** · **London, City/ Remote** · **Salary £90K - £ 95K plus bonus, plus benefits** · **Key Responsibilities**: · - Lead and coordinate the investigation effort for cyber security incidents from initial escalation through after-action reporting · ...

  • Akkodis

    Incident Response Engineer

    3 weeks ago

    Akkodis London, United Kingdom

    We are seeking an Incident Response Engineer to support one of our key clients. · As part of the Incident Response team, the Incident Response Engineer will be responsible for monitoring, investigating and responding to security incidents and supporting various security tools whi ...

  • NonStop Consulting Ltd

    Incident Response Manager

    3 weeks ago

    NonStop Consulting Ltd London, United Kingdom

    **Incident Response Manager** · I am currently looking for an Incident Response Manager/ Assistant Manager to join my prestigious client. You will be working as a key part of their specialist Cyber Response team to help their prominent, large-scale Clients understand and respond ...

  • Transport for London

    Incident Response Coordinator

    3 weeks ago

    Transport for London London, United Kingdom

    **Incident Response Coordinator** · **042914** · **Organisation** · - NETWORK MANAGEMENT CONTROL CENTRE · **Job** · - Administration · **Position Type** · - Full Time · **Location: Southwark, London** · **Salary: £33,800 (plus 24% non-pensionable shift allowance), plus benefits** ...

  • Talentorder

    Cyber Incident Response

    1 week ago

    Talentorder London, United Kingdom

    **Job Title**:Cyber Incident Response - Senior Managing Consultant · **Location**:London · **Salary**:£50,000-£65,000 · At our clients Consulting Solutions it provides you with the insights, deep technical expertise, and global resources needed to create and implement risk manage ...

  • GCS Recruitment Specialists Ltd

    Incident Response Associate

    3 days ago

    GCS Recruitment Specialists Ltd London, United Kingdom

    **Incident Response Associate, London** · **Full Time Permanent** · **The Role**: · - ** Managing incident response cases from first contact through to closure**: you will be the primary point of contact for all internal and external stakeholders, accountable for delivery in-time ...

  • NonStop Consulting Ltd

    Incident Response Manager

    1 week ago

    NonStop Consulting Ltd London, United Kingdom

    **Responsibilities** · - Manage and co-ordinate cyber security incidents for clients working closely with the team lead. · - Digital forensics of relevant incident data (disk, volatile memory, network packets, log files). · - Provide an up to date view of the cyber threat, and ad ...

  • Transport for London

    Incident Response Coordinator

    3 days ago

    Transport for London London, United Kingdom

    **Organisation** **-** NETWORK MANAGEMENT CONTROL CENTRE · **Job** **-** Administration · **Position Type** **-** Full Time · **Incident Response Coordinator** · **Location: Southwark, London** · **Salary: £34,000 (plus 24% non-pensionable shift allowance)**: · **Contract: Perman ...

  • Cypfer

    Digital Forensics Incident Response

    2 weeks ago

    Cypfer London, United Kingdom

    About Us: · We have an exciting opening for a Digital Forensics Incident Response (DFIR) Consultant. As a Digital Forensic and Incident Response Consultant you will engage in client-facing incident response projects and offer proactive incident response services. In a collaborati ...

  • GCS Recruitment Specialists Ltd

    Senior Incident Response Associate

    1 week ago

    GCS Recruitment Specialists Ltd London, United Kingdom

    **Overview** · My client is a global intelligence and cyber security consultancy specializing in solving complex information security challenges. Their team is comprised of sharp, curious, and driven individuals who excel at critical thinking and problem-solving. They prioritize ...

  • Secureworks

    Incident Response Identity Consultant

    3 weeks ago

    Secureworks London, United Kingdom

    Secureworks (NASDAQ: SCWX) is a global cybersecurity leader that protects customer progress with Secureworks Taegis, a cloud-native security analytics platform built on 20+ years of real-world threat intelligence and research, improving customers' ability to detect advanced threa ...

  • Anaplan

    SOC Incident Response Lead

    5 days ago

    Anaplan London, United Kingdom

    Here at Anaplan, we have reinvented how companies see, plan, and run their businesses. Our platform allows our customers to uncover new insights, connect their strategy to their plans, and work in ways they had not previously thought possible. We're growing fast, constantly innov ...

  • GCS Recruitment Specialists Ltd

    Senior Associate Incident Response

    3 days ago

    GCS Recruitment Specialists Ltd London, United Kingdom

    My client is a global intelligence and cyber security consultancy specialising in solving complex information security challenges. Their team is comprised of sharp, curious, and driven individuals who excel at critical thinking and problem-solving. They prioritise work-life balan ...

  • Vanquis Bank

    Cyber Security Incident Response Leader

    2 weeks ago

    Vanquis Bank London, United Kingdom

    **About Us** · Vanquis Banking Group has a rich history dating back to 1880. The company was founded in Bradford by Joshua Kelley Waddilove as The Provident Clothing and Supply Company to help people access finance and goods who couldn't from traditional lenders. · Today, Vanquis ...

  • Cisco Systems

    Incident Response Consultant, Talos, Uk

    3 weeks ago

    Cisco Systems London, United Kingdom

    **What You'll Do** · The Cisco Talos Incident Response Consultant will work with Cisco customers, using established methodologies, to perform a variety of reactive and pro-active Incident Response related activities. These may include emergency investigations of cyber incidents, ...

  • Cabinet Office

    Threat & Response Officer: Threats, Incident

    2 weeks ago

    Cabinet Office London, United Kingdom

    **Details**: · **Reference number**: · **Salary**: · - £38,250 - £42,250- A Civil Service Pension with an average employer contribution of 27%**Job grade**: · - Higher Executive Officer**Contract type**: · - Permanent**Business area**: · - CO - Government Security Group**Type of ...

  • Barclay Simpson

    Incident Response/threat Hunting Specialist

    1 week ago

    Barclay Simpson London, United Kingdom

    **Incident Response/Threat Hunting Specialist**: · - London · - £90,000 + bens · - Sector: Professional Services, Commerce and Industry · - Job reference: 40942 · I'm working with a boutique consultancy, who are seeking to grow to their existing cyber function with another dedica ...

  • Vanquis Bank

    Principal Security Incident Response Specialist

    2 weeks ago

    Vanquis Bank London, United Kingdom

    **Location**: Chatham/London/Bradford · **Salary**: · **Closing Date**: Sunday 30 July 2023 · **About Us** · Vanquis Banking Group has a rich history dating back to 1880. The company was founded in Bradford by Joshua Kelley Waddilove as The Provident Clothing and Supply Company t ...

  • East London NHS Foundation Trust

    Patient Safety Incident Response Framework

    5 days ago

    East London NHS Foundation Trust London, United Kingdom

    ELFT are looking for a dynamic PSIRF Implementation Lead who will lead and support the national and local implementation of the PSIRF alongside Quality Improvement colleagues following Qi Methodologies including PDSA cycles. · PSIRF supports the three strategic aims of the nation ...