{"id":1466898,"url":"https://alion.io/job/maersk-digital-forensics-incident-response-analyst","title":"Digital Forensics & Incident Response Analyst","company":{"id":7034,"name":"Maersk","domain":"maersk.com","url":"https://alion.io/company/maersk","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":94,"open_postings":637,"ghost_share":0,"stale_share":0.218,"repost_share":0.006,"time_to_fill_p50_days":36,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Maidenhead, United Kingdom"],"countries":["GB"],"hiring_countries":["GB"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":66000,"max_usd":116000,"period":"year","method":"role_seniority_country_cell","sample_n":42},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Autopsy","optional":false},{"name":"EnCase","optional":false},{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"Plaso","optional":false},{"name":"SIEM","optional":false},{"name":"Windows","optional":false},{"name":"X-Ways Forensics","optional":false}],"status":"live","first_seen_at":"2026-09-29T15:08:43Z","employer_posted_date":"2026-09-29","last_verified_at":"2026-11-01T07:37:00Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":32},"description":"Maersk is a global leader in integrated logistics and has been industry pioneers for over a century. Through innovation and transformation, we are redefining the boundaries of possibility, continuously setting new standards for efficiency, sustainability, and excellence.\nAt Maersk, we believe in the power of diversity, collaboration, and continuous learning, and we work hard to ensure that the people in our organisation reflect and understand the customers we exist to serve.\nWith over 100,000 employees across 130 countries, we work together to shape the future of global trade and logistics.\nJoin us as we harness cutting-edge technologies and unlock opportunities on a global scale. Together, let's sail towards a brighter, more sustainable future with Maersk.\nWhat We Offer\nThis is an exciting career opportunity to work in a multinational, Global 500 company that makes global trade happen. You will be interacting daily with colleagues internationally, giving you the opportunity to develop your professional skills in a global environment. We provide support for you to shape your own career by achieving expertise and learning on the job.\nWork with cutting-edge cyber security technologies across traditional infrastructure, cloud, operational technology (OT), and emerging AI-driven environments.\nBenefit from continuous learning opportunities through training, threat-hunting activities, cyber security projects, and Capture the Flag (CTF) exercises.\nEnjoy flexible remote working arrangements with occasional in-person team activities that support work-life balance.\nCollaborate with a global team focused on innovation, knowledge sharing, continuous improvement, and operational excellence.\nAbout the Role\nJoin Maersk's Cyber team and play a key role in a modern incident management and response function that combines digital forensics, threat hunting, detection engineering, and cyber security improvement initiatives. This role offers the opportunity to contribute to complex investigations, strengthen response capabilities, and help shape the future of cyber defence within a globally recognised organisation.\nKey Responsibilities\nConduct digital forensic investigations across endpoint, cloud, and OT environments to support incident response and recovery activities.\nPerform threat hunting and behavioural analysis to proactively identify threats and malicious activity across the network.\nDeliver detailed forensic root cause analysis (RCA) and investigation findings to both technical and non-technical stakeholders.\nSupport cyber security uplift projects and help embed new capabilities, processes, and technologies into operational teams.\nCollaborate with Cyber Operations teams to continuously improve detection, monitoring, and response capabilities.\nSupport security incident management activities, including triage, investigation, containment, recovery, and post-incident reviews.\nAct as an escalation point for complex investigations and contribute to the development of cyber response capabilities and junior team members.\nWhat We Are Looking For\nContinuous improvement mindset: we are looking for someone who brings a thoughtful improvement mindset, curious about how work gets done and motivated to make meaningful, sustainable improvements over time.\nProven experience conducting enterprise-scale digital forensic investigations across Windows and Linux operating systems.\nStrong knowledge of forensic artefacts including event logs, registry analysis, browser artefacts, file systems, persistence mechanisms, lateral movement techniques, and file-less attacks.\nExperience with threat hunting, security operations, incident investigation, and security technologies such as SIEM platforms, firewalls, and monitoring solutions.\nHands-on knowledge of forensic tools such as X-Ways, EnCase, Autopsy, TimeSketch, and Plaso, with familiarity in cloud forensics and memory analysis considered advantageous.\nDemonstrated ability to communicate complex technical findings clearly through reports, executive summaries, and stakeholder engagement.\nMinimum of 5 years of experience within a SOC, CERT, incident response, or forensic investigation environment, with the ability to manage competing priorities in fast-paced situations.\n#LI-JL2\nMaersk is committed to a diverse and inclusive workplace, and we embrace different styles of thinking. Maersk is an equal opportunities employer and welcomes applicants without regard to race, colour, gender, sex, age, religion, creed, national origin, ancestry, citizenship, marital status, sexual orientation, physical or mental disability, medical condition, pregnancy or parental leave, veteran status, gender identity, genetic information, or any other characteristic protected by applicable law. We will consider qualified applicants with criminal histories in a manner consistent with all legal requirements.\nWe are happy to support your need for any adjustments during the application and hiring process. If you need special assistance or an accommodation to use our website, apply for a position, or to perform a job, please contact us by emailing .","description_format":"text","description_chars":5156,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Parental leave"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response","Sea Freight","Logistics","Supply Chain"],"lifecycle":[{"event":"open","at":"2026-09-29T15:08:43Z"},{"event":"reopen","at":"2026-10-25T07:41:32Z"}],"visa":[],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.788,"p_room":0.75,"age_days":32,"expected_fill_days":36,"reasons":["conf:10","velocity","win:late","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/maersk-digital-forensics-incident-response-analyst","json_url":"https://alion.io/job/maersk-digital-forensics-incident-response-analyst.json","meta":{"generated_at":"2026-11-01T11:25:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":17643,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7034},"rest":"https://alion.io/mcp/rest/get_company?id=7034"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmaersk-digital-forensics-incident-response-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmaersk-digital-forensics-incident-response-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmaersk-digital-forensics-incident-response-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/maersk-digital-forensics-incident-response-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmaersk-digital-forensics-incident-response-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1466898}},{"tool":"search_jobs","arguments":{"company":"maersk.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1466898},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}