Cyber Incident Response Lead | Large Retailer | 3 Month Contract | Inside IR35

CompanyGattaca

LocationLondon Area, United Kingdom

Posted At2/26/2026

UK Visa Sponsorship Analytics

Analytics are greyed out due to low classification confidence (29.0%).

Occupation Type

Cyber security professionals

Occupation Code Skill LevelHigher Skilled

Sponsorship Salary Threshold

£48,500 (£24.87 per hour)

Occupation rate applies

Above analytics are generated algorithmically based on job titles and may not always be the same as the company's job classification. You can also check detailed occupation eligibility, and salary criteria on our UK Visa Eligible Occupations & Salary Thresholds page.

Disclaimer: Hunt UK Visa Sponsors aggregates job listings from publicly available sources, such as search engines, to assist with your job hunting. We do not claim affiliation with Gattaca. For the most up-to-date job details, please visit the official website by clicking "Apply Now."

Description

Cyber Incident Response Lead

Contract | Remote with occasional onsite | Inside IR35

I’m supporting a leading organisation in the cybersecurity sector that is investing heavily in its incident readiness and response capability. They’re looking for an experienced Cyber Incident Response specialist to help uplift their documentation, playbooks, and overall maturity.

What You’ll Be Doing

Developing and refining the organisation’s Incident Response Plan, Communication Plan and IR playbooks.
Creating containment, eradication and recovery procedures across ransomware, BEC, insider threat, cloud compromise and more.
Conducting IR maturity assessments and working with technical and non‑technical stakeholders.
Reviewing current tooling, processes and architecture to ensure alignment with real-world environments.
Supporting tabletop exercises to enhance organisational readiness.
Ensuring documentation meets CIS Controls and regulatory expectations.

What We’re Looking For

5+ years in Incident Response, DFIR, SOC or Cyber Consulting.

Strong knowledge of attack methodologies, threat actors and IR lifecycle.

Experience producing IR documentation for medium/large organisations.

Cloud experience across Azure/AWS plus on‑premise environments.

Certifications such as GCIH, GCFA or CISSP are highly desirable.

Why This Contract?

Inside IR35
High-impact role shaping future cyber resilience
Work with senior stakeholders across tech, legal, risk and operations
Fully remote with flexible working
Opportunity to define industry-leading IR processes

If you’re an experienced Incident Response specialist ready for a meaningful contract engagement, I’d love to speak with you.