Global investigations and cyber incident response consultancy
S-RM operates a geographically distributed incident response and investigations practice with deep forensics and cyber incident capabilities. The security-heavy hiring mix (27 of 41 active roles) combined with demand signals around incident response scaling and managed detection services suggests the firm is expanding its incident response operations faster than its core engineering capacity — a structural pattern typical of services-led security practices scaling reactively to client demand.
Notable leadership hires: Incident Response Lead, Forensics Lead, Restoration Lead, Engagement Lead
S-RM is a UK-based investigations and cyber security consultancy founded in 2005, operating across nine international offices. The firm serves mid-market and enterprise clients with three core service lines: incident response and digital forensics, cyber risk advisory and compliance due diligence, and intelligence-driven investigations for disputes and transactions. The stack reflects a mature incident response operation: EDR, SOAR, and forensic tooling paired with AWS infrastructure (ECS, EKS, Lambda, RDS) and modern development languages (Go, Python, React). Revenue generation is consultancy-driven, with sales infrastructure (Salesforce, LinkedIn Recruiter, Greenhouse) supporting a distributed team.
EDR, SOAR, and digital forensics tools paired with AWS (ECS, EKS, Lambda, RDS), Kubernetes, and Terraform for infrastructure. Detection rule development and incident data pipelines use Python, Go, React, and OpenSearch. Security scanning (SAST, DAST) and vulnerability mapping via MITRE ATT&CK framework.
United Kingdom (headquarters), United States, Malaysia, South Africa, and Netherlands across current active openings.
Other companies in the same industry, closest in size
S-RM's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.