Contact Intec Select Ltd
Intec Select Ltd
Security Incident Response Engineer (ServiceNow)
Warrington, Cheshire
Contact Intec Select Ltd
- Hours
- Full Time
- Posted
- 24 days ago
- Salary
- £100 - Hour
- Recruiter
- Intec Select Ltd
- Closes
- 01 Sep 2026
- Course
- No
- Recruiter Type
- Direct Employer
Description
Security Incident Response Engineer (ServiceNow)
Contract: 6 Months (Likely Extension)
Location: Hybrid
IR35: Outside / LTD – £700PD
SC Cleared / BPSS
A highly reputable corporation is hiring an experienced ServiceNow Security Incident Response (SIR) Consultant to support the design, implementation and optimisation of a Security Incident Response capability for a Cyber Security Operations Centre (CSOC).
This is an excellent opportunity to play a key role in enhancing cyber incident management processes, automating security workflows and integrating ServiceNow Security Operations with wider security tooling.
Key Responsibilities
ServiceNow SIR Workflow Design & Development
Design and configure end-to-end Security Incident Response workflows.
Build workflows covering incident triage, escalation, investigation and case management.
Develop evidence management processes and structured incident lifecycles.
Align workflows with Cyber Operations requirements, industry best practice and NCSC-aligned incident response processes.
Test, refine and optimise workflows to improve operational efficiency.
Essential Skills
Strong experience implementing and configuring ServiceNow Security Incident Response (SIR).
Expertise across ServiceNow Security Operations (SecOps).
Experience integrating ServiceNow with SIEM, SOAR, and Threat Intelligence platforms.
Strong knowledge of ITSM (Incident, Change and Problem Management).
Experience designing and automating security workflows and incident response processes.
Strong dashboard, reporting and analytics capabilities within ServiceNow.
Excellent stakeholder management, documentation and knowledge transfer skills. xjnqpsq
ServiceNow SIR/SecOps certifications are desirable.
This is an opportunity to work on a high-profile cyber security programme where you'll have a direct impact on strengthening incident response capability, improving automation and helping shape the future Security Operations environment
Ad ID: 5418594174
Stay Safe
"Only access Gumtree from gumtree.com and do not follow links sent by other users"
"Share photos and ask lots of questions about the items you are buying and selling"
"If an ad or reply sounds too good to be true, it probably is"
"Use the 'Reply to ad' button for your safety and privacy"
"Don't reply to email addresses hidden in text and pictures"
"Beware of fake Gumtree, eBay or escrow sites and invoices"
1 of 6
