LanceSoft UK
Incident Response Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Incident Response Engineer
Contract Length: 6 months
Location: Warrington – hybrid, 2 days per week in the office
Key Essentials
- Experience with ServiceNow, particularly SecOps
- Cyber security / incident response experience
- Stakeholder engagement
Responsibilities
1. ServiceNow SIR Workflow Design & Development
-
Review existing processes and define required workflows in SIR, including:
- Incident triage
- Escalation paths
- Case handling lifecycle
- Evidence management
- Integration with CSOC tooling
-
Build, test, and refine workflows to ensure alignment with:
- Cyber Operations requirements
- Incident Management frameworks
- NCSC-aligned cyber incident processes
2. Platform Configuration & Enhancement
- Configure and customise the SIR module including:
- Forms, fields, templates, and worknotes
- Automated routing and case assignment
- Severity/classification schemes
- Response templates and guided response actions
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
- Identify missing capabilities and design platform enhancements.
- Work with ServiceNow platform owners to ensure changes meet governance and architectural standards.
3. Systems Integration & Automation
-
Support integration of SIR with:
- SIEM/SOC tools
- Threat intelligence feeds
- Security Orchestration, Automation and Response (SOAR) modules
- Email ingestion and ticket creation workflows
- ITSM processes (Change, Problem, Incident)
-
Develop automations that reduce manual effort and improve response times.
4. Data, Reporting & Dashboards
- Define and implement:
- Operational dashboards for CSOC analysts
- Performance metrics and KPIs for Senior management
- Compliance and audit-ready reporting
- Workflow analytics to drive continuous improvement
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Ensure visibility of incident trends, response times, and workflow bottlenecks.
5. Documentation, Playbooks & Supporting Materials
-
Build existing cyber response processes into SIR-based guided workflows where appropriate.
-
Create:
- User guides
- SOPs / process documentation
- Technical configuration documentation
- Data flow diagrams
- Integration maps
-
Ensure all documentation supports long-term maintainability.
6. Training, Knowledge Transfer & BAU Handover
- Deliver hands-on training sessions for Cyber Operations staff.
- Provide detailed handover materials for:
- ServiceNow platform support
- Cyber Operations teams
- Process owners
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills