We are recruiting for a hands-on Contract IR Lead to help shape and mature the Incident Response capability. This is a key role for someone who can lead from the front comfortable improving processes while also stepping into live incidents when needed.

• Day Rate: £500-£550pd
• IR35 Status: Outside
• Duration: Initial 6 months
• Travel: Weekly to Liverpool Office

This IR Lead will have the previous following experience:

• Lead and evolve IR operations using Microsoft security tools (including Sentinel), driving improvements in detection, response, and overall capability maturity
• Act as an escalation point for incidents, remaining hands-on and directly involved in investigations and response when required
• Develop and refine incident response processes, playbooks, and workflows to strengthen organisational resilience
• Establish meaningful metrics, reporting, and threat visibility to inform decision-making and demonstrate SOC effectiveness