CIRT L3 Lead

If you need support in completing the application or if you require a different format of this document, please get in touch with at UKI.recruitment@tcs.com or call TCS London Office number 02031552100 with the subject line: “Application Support Request”

Role: CIRT L3 Lead

Job Type: Permanent

Location: Bradford, UK

Number of hours: 40 hours per week – full time

We have an exciting opportunity for you as a CIRT L3 Lead.

Careers at TCS: It means more

TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

• Gain access to endless learning opportunities.
• Lead projects and inspire both colleagues and stakeholders.

The Role

AS a CIRT lead, you will be responsible for developing and fine tuning the use cases in Rapid7 InsightIDR and integrate with threat intelligence. You will be also responsible for leading the end-to-end cyber incident response and cross functional team.

Your responsibilities:

• Lead end-to-end cyber incident response and coordinate cross-team remediation efforts.
• Conduct proactive Hypothesis/Adversary based threat hunting to uncover undetected malicious activity.
• Develop & fine-tune detection rules and UBA use cases in Rapid7 InsightIDR.
• Integrate threat intelligence to anticipate and defend against retail-specific threats (e.g., POS attacks, ransomware, supply chain compromise).
• Manage post-incident reviews, create playbooks, and mentor CIRT team analysts.
• Collaborate with IT and Security Engineering to enhance SIEM/SOAR automation and detection coverage.
• Direct technical teams in immediate containment actions, evidence gathering/preservation, eradication of threats (e.g., malware removal), and recovery of affected systems from clean backups

Your Profile

Essential skills/knowledge/experience:

• Experience in SOC, IR, or Threat Hunting roles.
• Strong understanding of MITRE ATT&CK, NIST 800-61, and PCI DSS frameworks.
• Experience with Rapid7 InsightIDR or any other MDR solution (rule creation, tuning, and dashboarding).
• Certifications: GCIH, GCFA, CISSP, or Rapid7 InsightIDR Specialist.
• Experience with SOAR tools (InsightConnect, Cortex XSOAR) and scripting (Python/PowerShell).
• Knowledge of retail networks, POS systems, and cloud infrastructure.

Desirable skills:

• Strategic thinking and problem-solving
• Collaboration and teamwork
• Effective communication and stakeholder management
• Adaptability and continuous learning

Rewards & Benefits:

TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network.

We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon.

Diversity, Inclusion and Wellbeing:

Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998.

We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.

As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at UKI.recruitment@tcs.com if you would like to opt in.

If you are an applicant who needs any adjustments to the application process or interview, please contact us at UKI.recruitment@tcs.com

Next Steps:

Application Process:

1. Online application: You can apply directly through LinkedIn/ by uploading your CV. In case you wish to submit your application via another format like audio/video, please, contact - UKI.recruitment@tcs.com
2. Skill-Based discussion: This will be a level 1 interview with the project team, it can be via video or in-person. Details will be confirmed by your recruiter.
3. Managerial discussion: This discussion will focus on behavioral aspects and person-organisation fit.
4. HR Discussion: This will be with one of the members of the HR team and will cover your career journey, aspirations for growth, compensation and any other questions you may have.

Beware of Fraudulent offers

This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to UKI.recruitment@tcs.com

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.

Join us and do more of what matters. Apply online now.