Cyber IR Lead

Cyber Incident Response Lead

We are recruiting for a hands-on Contract IR Lead to help shape and mature the Incident Response capability. This is a key role for someone who can lead from the front comfortable improving processes while also stepping into live incidents when needed.

• Lead and evolve IR operations using Microsoft security tools (including Sentinel), driving improvements in detection, response, and overall capability maturity
• Act as an escalation point for incidents, remaining hands-on and directly involved in investigations and response when required
• Develop and refine incident response processes, playbooks, and workflows to strengthen organisational resilience
• Establish meaningful metrics, reporting, and threat visibility to inform decision-making and demonstrate SOC effectiveness

• Travel: 2 days a fortnight in Liverpool Office (2 days every other week in office)