Incident Response - Recovery Specialist - Manchester

Salary: Up to £60,000 DOE
Location: Manchester (with travel at short notice)

We're recruiting on behalf of a fast-growing cyber security organisation that specialises in incident response, recovery and digital forensics. This is a unique opportunity for someone who thrives in high-pressure situations and wants to be at the centre of bringing businesses back to life following serious cyber incidents.

If you want a role where your work genuinely matters, where no two days are the same, and where you can develop deep expertise across IR, forensics and secure infrastructure, this position offers exactly that.

• You'll be the person organisations rely on during their most critical moments

• You'll solve real technical challenges and rebuild environments from the ground up

• You'll work alongside highly skilled IR and forensic specialists

• You'll gain exposure to a wide range of environments, technologies and industries

• You'll join a company that invests heavily in training, development and career progression

This is not routine support work. This is hands-on, technically rich incident recovery where your skills directly shape the outcome.

• Restoring and rebuilding client infrastructures after cyber attacks

• Remediating compromised environments and enabling business operations to resume

• Working closely with incident response investigators to help prevent future breaches

• Segmenting networks and containing threats during live incidents

• Collecting Firewall and authentication logs for forensic analysis

• Migrating on-prem systems to secure cloud alternatives

• Automating recovery processes using PowerShell or similar tooling

• Communicating confidently, calmly and clearly with clients during high-pressure situations

At least 5 years' experience with strong capability across:

• Windows Server, Active Directory, Domain Controllers, Exchange

• Office 365, Azure/Entra

• Firewalls, VPNs and Switches

• Veeam or similar backup technologies

• VMware or Hyper-V virtualisation

Desirable experience includes cyber security certifications (Crest or equivalent), AWS, vulnerability scanning tools and knowledge of Cyber Essentials or ISO27001.

You must be comfortable travelling at short notice and able to demonstrate strong communication, attention to detail and a calm, structured approach under pressure.

Security clearance to SC level will be required; vetting can be arranged if not currently held.

Alongside structured development across incident response, auditing and forensics, you'll receive:

• Annual subscription of your choice (Netflix, Amazon Prime, Spotify etc.)

• Annual anniversary gifts increasing in value

• Bupa Cash Plan

• Company pension

• An extra day off for your birthday

• Loyalty bonuses (£300 at 3 years, £500 at 5 years, £1,000 at 10 years)

• Regular social events including a Family Day

• Free monthly lunches

This is a role for someone who wants to grow, take ownership and be part of a team that values their contribution.

If you want to be at the frontline of helping organisations recover stronger and more secure, we'd like to hear from you.