Security Incident Response Engineer (ServiceNow)

Security Incident Response Engineer (ServiceNow)<br />Contract: 6 Months (Likely Extension)<br />Location: Hybrid<br />IR35:

Outside / LTD – £700PD<br />SC Cleared / BPSS A highly reputable corporation is hiring an experienced ServiceNow Security Incident Response (SIR) Consultant to support the design, implementation and optimisation of a Security Incident Response capability for a Cyber Security Operations Centre (CSOC).

This is an excellent opportunity to play a key role in enhancing cyber incident management processes, automating security workflows and integrating ServiceNow Security Operations with wider security tooling.

Key Responsibilities ServiceNow SIR Workflow Design &amp; Development Design and configure end-to-end Security Incident Response workflows.<br />Build workflows covering incident triage, escalation, investigation and case management.<br />Develop evidence management processes and structured incident lifecycles.<br />Align workflows with Cyber Operations requirements, industry best practice and NCSC-aligned incident response processes.<br />Test, refine and optimise workflows to improve operational efficiency.<br />Essential Skills Strong experience implementing and configuring ServiceNow Security Incident Response (SIR).<br />Expertise across ServiceNow Security Operations (SecOps).<br />Experience integrating ServiceNow with SIEM, SOAR, and Threat Intelligence platforms.<br />Strong knowledge of ITSM (Incident, Change and Problem Management).<br />Experience designing and automating security workflows and incident response processes.<br />Strong dashboard, reporting and analytics capabilities within ServiceNow.<br />Excellent stakeholder management, documentation and knowledge transfer skills.<br />ServiceNow SIR/SecOps certifications are desirable.<br />This is an opportunity to work on a high-profile cyber security programme where you'll have a direct impact on strengthening incident response capability, improving automation and helping shape the future Security Operations environment