Cyber Security Incident Response Engineer

6-month initial contract Inside IR35 1 day per week onsite in Welwyn Garden City

Day rate highly flexible for the right person

I'm working with a large retail business, and they are looking for a Security Engineer to help build and mature their Cyber Security Incident Response capability. This is a strategic and hands on role, working closely with the Cyber Security Incident Manager, SOC, DFIR, Threat Intelligence and Engineering teams to improve the organisation's readiness for high impact cyber incidents such as ransomware, insider threats and major security breaches.

• CSIRT, SOC or Incident Response experience within a large enterprise environment.
• Building and improving incident response capabilities, processes, playbooks and runbooks.
• Supporting tabletop exercises, simulations and cyber readiness activities.
• Knowledge of frameworks such as NIST, ISO 27035 and MITRE ATT&CK.
• Experience with security tooling including SIEM, SOAR, EDR/XDR and cloud security platforms.
• Strong stakeholder management and documentation skills.
• Ability to drive continuous improvement across cyber incident response and resilience.