At a Glance
- Tasks: Lead investigations into complex security incidents and drive them to resolution.
- Company: Join a highly regulated industry with a focus on cybersecurity excellence.
- Benefits: Market rates, hybrid work model, and immediate start available.
- Other info: Dynamic role with opportunities for deep technical investigation and career growth.
- Why this job: Make a real impact in cybersecurity by tackling challenging incidents head-on.
- Qualifications: Experience in Security Engineering, Incident Response, and forensic analysis required.
The predicted salary is between 58500 - 71500 £ per year.
Outside IR35 Contract Role - Market Rates - ASAP Start Hybrid 2 days a week in the office (City of London) Highly Regulated Industry.
Our client is looking for a strong Security Engineer to act as the technical escalation point above their SOC function, taking ownership of complex security incidents and driving investigations through to resolution. This is a hands-on role focused on incident triage, forensic investigation, threat analysis, and remediation within a large enterprise environment. You will be responsible for investigating escalated security events, identifying indicators of compromise (IoCs), performing root cause analysis, and improving detection capabilities through engineering and threat-informed defence measures.
Key Responsibilities:
- Investigate and lead the response to security incidents escalated from the SOC team through to containment and remediation.
- Perform forensic analysis across endpoints, identities, network, and cloud environments to determine scope, impact, and root cause.
- Identify, analyse, and validate indicators of compromise (IoCs), attacker behaviours, and attack pathways.
- Develop and optimise detection logic, correlation rules, and KQL queries to improve threat visibility and response effectiveness.
- Produce clear technical findings, remediation recommendations, and lessons learned following security incidents.
- Partner with security operations, infrastructure, and application teams to strengthen security controls and reduce future risk.
Qualifications and Requirements:
- Previous experience in Security Engineering, Incident Response, Digital Forensics, Threat Hunting, or advanced SOC environments.
- Strong hands-on experience investigating escalated cyber security incidents within enterprise-scale environments.
- Proven ability to conduct forensic analysis and determine root cause across endpoint, identity, network, and cloud technologies.
- Experience identifying indicators of compromise (IoCs), mapping attacker activity, and recommending effective remediation actions.
- Strong KQL query development skills and experience working with SIEM, EDR, and security monitoring platforms.
- Excellent analytical and communication skills, with the ability to present technical findings to both technical and non-technical stakeholders.
This role would suit someone who enjoys deep technical investigation, security engineering, and incident remediation rather than traditional alert monitoring or administrative SOC activities.
Security Engineer (Cyber Incident Investigation & Response) employer: Computappoint
Join a prestigious international law firm that values innovation and security, offering a dynamic hybrid working environment in the heart of London. With a strong commitment to employee development, you will have access to comprehensive benefits, competitive salary packages, and opportunities to influence cutting-edge security strategies. This role not only allows you to lead in enterprise security architecture but also fosters a collaborative culture where your expertise will directly impact the firm's approach to technology and compliance.
StudySmarter Expert Advice🤫
We think this is how you could land Security Engineer (Cyber Incident Investigation & Response)
✨Get Engaged in Cybersecurity Communities
Dive into online forums or local meetups, like OWASP events or Cybersecurity conferences. These spaces are packed with pros who can share insights and might even know about temporary roles at places like Computappoint.
✨Showcase Your Skills Publicly
Link your GitHub or create a series of blogs sharing your knowledge on cybersecurity topics. It’s a great way to demonstrate your expertise and attract attention from hiring managers, especially when they see your passion in action.
✨Stay On Top of Temp Opportunities
Keep an eye on platforms that list temporary positions specifically in tech. Websites focusing on contract roles in cybersecurity can lead straight to employers like Computappoint.
✨Make Contact with Recruiters Specialising in Cybersecurity
Reach out to recruitment agencies that focus on cybersecurity roles. They often have insights into temporary roles before they’re advertised and can put your name forward to companies like Computappoint.
We think you need these skills to ace Security Engineer (Cyber Incident Investigation & Response)
Some tips for your application 🫡
Show Off Your Technical Skills:In cybersecurity, it's vital to highlight your skills with relevant tools and technologies. Make sure your CV showcases your experience with firewalls, intrusion detection systems, and any cybersecurity frameworks you've worked with. This gives Computappoint a clear view of your capabilities right off the bat.
Certifications Matter:If you’ve got any cybersecurity certifications, like CompTIA Security+ or CISSP, flaunt them! These not only validate your skills but also show that you’re committed to the field. Add a section to your CV specifically for this, because in a temporary role like this, those credentials can really set you apart.
Tailor Your Cover Letter to the Role:For a temporary position, we want to see your willingness to learn and adapt quickly. Make your cover letter specific to the role at Computappoint; mention why you’re excited about the opportunity and how it fits your career goals. A personal touch can make a big difference!
Don’t Forget the Soft Skills:In cybersecurity, technical skills are crucial, but so are soft skills like teamwork and communication. Make sure to weave examples of how you've collaborated with teams or communicated complex ideas into your application. This shows that you're not just a tech whizz but also a great team player, perfect for a temporary role at Computappoint.
How to prepare for a job interview at Computappoint
✨Brush Up on Technical Skills
Make sure you’re familiar with the latest cybersecurity tools and techniques, like firewalls, intrusion detection systems, and malware analysis. During the interview with Computappoint for the Security Engineer (Cyber Incident Investigation & Response), be prepared to discuss specific scenarios where you tackled security threats or vulnerabilities.
✨Show Your Problem-Solving Prowess
Cybersecurity is all about thinking on your feet. Expect technical questions that require you to demonstrate your problem-solving abilities. You might be presented with a mock security breach scenario, so practising your responses to potential threats can be a game changer!
✨Demonstrate Your Adaptability
As this is a temporary role, showing that you're adaptable and quick to learn is crucial. Talk about times you've picked up new skills or reacted to changing situations quickly. Employers want to know you can hit the ground running and keep things secure during your short stay at Computappoint.
✨Bring Relevant Certifications
If you have any relevant cybersecurity certifications, like CompTIA Security+ or CEH, be sure to mention them. This can really help you stand out during a temporary hiring process, as it showcases your commitment to the field and your readiness to take on the Security Engineer (Cyber Incident Investigation & Response) role at Computappoint.
