About this role
Qualification & Experience Required
Industry standard Security qualifications (SANS GCIH, CISSP, Azure, Splunk, etc) or equivalent.
Strong experience with SIEM technologies within a SOC (Splunk experience highly desirable). MS Sentinel is also now being introduced.
Hands-on experience creating security use cases, analytics, and playbooks.
Experience conducting security event triage and rapid incident response.
Log analysis experience (Wireshark, NPCap, etc.).
Experience with (ITSM) Service Management Systems (Remedy, Service Now).
Strong understanding of information security principles, threat detection, and remediation processes.
Knowledge of Microsoft and Linux technologies, networking, anti-virus, vulnerability management, and encryption.
Familiarity with GDPR, Data Protection legislation, and security governance frameworks.
Ability to think critically under pressure and respond effectively to fast-moving security incidents.
Scripting or query experience is highly desirable (SPL, KQL, etc.).
Good communication skills from previous roles.
Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take a minimum 10 weeks. LA International is an award-winning partner of choice for many of the world's most influential companies and government organisations. Holding Enhanced Government Security Accreditation, we are recognised as the European market leader in the delivery of Security Cleared talent to organisations that demand the very highest levels of security, compliance and assurance.
An award-winning organisation, having secured the prestigious Queens Award for Enterprise: International Trade over multiple years. We are committed to fostering an inclusive, equitable and accessible workplace where everyone feels valued and supported. We welcome applications from all individuals, regardless of background or identity, and we encourage candidates who may not meet every listed requirement to still apply. If you require any adjustments or support during the recruitment process, please let us know and we will work with you to ensure a fair and accessible experience.
Please Note: If a high volume of applications is received, only candidates shortlisted will be contacted.
About cyber security & digital forensics roles for ex-police
Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.
See all cyber security & digital forensics jobs in Birmingham →Why this fits a police background
- Police experience explicitly valued
- Incident command & response
- Working to legislation & regulation
What cyber security & digital forensics roles pay ex-police
Advertised UK ranges, editorial estimates reviewed July 2026
| Digital forensics analyst | £32,000–£45,000 |
| DFIR consultant | £45,000–£65,000 |
| Senior forensics / IR specialist | £60,000–£80,000 |
| Threat-intelligence specialist | £55,000–£80,000 |