The Incident Response Consultant collects and analyzes data, identifies root causes of cyber incidents, and reports findings to clients, ensuring effective incident management and fostering strong client relationships.
At CFC Response you will be part of a unique collaborative team of incident responders, business resumption engineers, and cybersecurity specialists whose sole responsibility it is to protect, recover, and mature the more than 80,000 CFC Underwriting insurance policyholders. You will be joining a group of technical experts who tackle cyber threats day-in-day-out, at scale, for a myriad of clients ranging from small businesses with minimal in-house capabilities, right through to large complex corporations with a full stack. You will never be bored, you will always be learning, and you will have fun doing it.
This is a technical incident response role whose primary focus will be on data scoping and collection, investigation of the root cause, scope and data impact of a cyber incident and the verbal and written reporting of findings to respective insured/clients. As part of this undertaking, you will be joining a team of leading IR industry professionals who are responding to complex cyber incidents, at scale and across the globe. Furthermore, you will be supported by a wider team of experts.
Key Responsibilities
You’ll lead the charge in collecting and analysing data, uncovering root causes, and identifying the scope of data exposure. Your insights will directly shape containment and eradication strategies for clients, and you’ll have the opportunity to present your findings with confidence, answering technical questions and guiding stakeholders through the incident lifecycle. From authoring detailed investigation reports aligned to the MITRE ATT&CK framework to compiling Indicators of Compromise, your work will be critical in helping clients understand and recover from complex threats.
Beyond technical excellence, this role is about building trust and delivering exceptional service. You’ll collaborate closely with clients, policyholders, brokers, underwriters, and capacity providers—fostering strong relationships and championing the values that define CFC’s culture. Whether you're analysing phishing emails and bypassed security controls or supporting the wider incident response team, your contributions will reflect integrity, accuracy, and quality. If you're passionate about cybersecurity and thrive in a fast-paced, client-focused environment, this is your chance to be part of something truly meaningful.
Skills, Knowledge and Expertise
Within this role, the successful candidate will have:
- Demonstrable understanding of common cyber-attacks.
- Programming experience in Python, PowerShell, BASH or similar scripting languages.
- Working knowledge of the Microsoft 365 platform
- Laser focus on customer service and product excellence.
- Demonstratable investigational skills.
Core Values
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We’re never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don’t take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
About
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1200 staff and is trusted by more than 100,000 businesses across 90 countries.At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.Feeling like you need to tick every box before applying? We see things differently. In a rapidly scaling company like ours, ambition and the drive to learn count for more than a 'perfect' checklist. We're building the future of insurance, and that requires diverse talent eager to grow with us. If this role excites you and you're ready to make a significant impact, bring your unique background and let's build something great together.
CFC London, England Office
London, United Kingdom
Similar Jobs
Consulting
Supports digital forensics and incident response engagements by collecting and preserving digital evidence, conducting forensic analysis, investigating data breaches and security incidents, and preparing defensible client deliverables. The role involves working with multiple operating systems, cloud platforms, forensic tools, scripting languages, and security frameworks. Responsibilities also include supporting investigation teams, maintaining evidential standards, communicating with clients, potentially providing expert testimony, and traveling internationally up to 25% of the time.
Top Skills:
Amazon Web Services (Aws)AxiomBashBlacklightCellebriteCyber Kill ChainDeftEdrEncaseFtkGoogle WorkspaceIefIso 17025Kali LinuxLinuxLogicube FalconMicrosoft 365AzureWindowsMitre Att&CkNistNpccNuixPowershellPythonSQLVelociraptorWinfeX-WaysXry
Consulting
Provides digital forensics, incident response, cybersecurity, eDiscovery, and investigative consulting for corporate, legal, and government clients. Leads forensic collections and analyses, supports investigations, produces defensible expert reports and testimony, and advises clients on cyber incidents. Requires expertise across operating systems, cloud platforms, networks, forensic tools, mobile devices, scripting, and log analysis. The role also involves client communications, business development, marketing support, and international travel of up to 25%.
Top Skills:
AppleAWSAxiomAzureBashBlacklightCellebriteCyber Kill ChainDeftEdrEncaseFtkGoogle WorkspaceIefKali LinuxLinuxLogicube FalconMicrosoft 365WindowsMitre Att&CkNuixPowershellPythonSQLVelociraptorWinfeX-WaysXry
Consulting
Leads digital forensics and cyber incident response engagements, including evidence collection, forensic analysis, incident management, client deliverables, crisis support, and team leadership. Provides technical consulting across regions, maintains defensible evidential standards, develops proposals and project plans, supports business development, and serves as a subject matter expert. The role includes on-call availability, crisis deployment, client management, coaching professionals, and international travel of up to 25%.
Top Skills:
AWSAxiomAzureBashBlackbagCyber Kill ChainEdrEdrmEncaseLinuxWindowsMitre Att&CkNistNpccNuixOffice 365PowershellPythonSansSQL
What you need to know about the London Tech Scene
London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.
