Cyber Security Incident Response Engineer

6-month initial contract
Inside IR35
1 day per week onsite in Welwyn Garden City
Day rate highly flexible for the right person

I'm working with a large retail business, and they are looking for a Security Engineer to help build and mature their Cyber Security Incident Response capability.

This is a strategic and hands-on role, working closely with the Cyber Security Incident Manager, SOC, DFIR, Threat Intelligence and Engineering teams to improve the organisation's readiness for high-impact cyber incidents such as ransomware, insider threats and major security breaches.

Key experience required:

• CSIRT, SOC or Incident Response experience within a large enterprise environment.
• Building and improving incident response capabilities, processes, playbooks and runbooks.
• Supporting tabletop exercises, simulations and cyber readiness activities.
• Knowledge of frameworks such as NIST, ISO 27035 and MITRE ATT&CK.
• Experience with security tooling including SIEM, SOAR, EDR/XDR and cloud security platforms.
• Strong stakeholder management and documentation skills.
• Ability to drive continuous improvement across cyber incident response and resilience.