Information Security Management

Our organisation is strengthening its security posture with a clear emphasis on threat detection and rapid response. I need a seasoned team that can stand up or optimise a modern SOC workflow, tune SIEM/EDR tooling, and leave us with incident-response policies we can rely on when minutes matter.

Primary objective
The work revolves around real-time threat detection and response. Expect to help us identify gaps, integrate log sources, fine-tune alerting thresholds, and rehearse playbooks so we consistently triage, contain, and remediate incidents.

Policy development
Alongside the technical build-out, you will craft or refine our incident response policies. These policies must dovetail with existing governance documents while remaining clear enough for non-technical stakeholders to follow under pressure.

Data protection considerations
Your deliverables must explicitly address:
• Data privacy and confidentiality
• Data integrity and availability
• Data storage and retention

Key success criteria
• End-to-end detection pipeline tested and documented
• Incident response playbooks covering at least five common attack scenarios
• Updated policy pack reviewed with our legal and compliance teams
• Knowledge transfer session to internal staff, including tabletop exercise

We already run Splunk, CrowdStrike, and a small MISP instance; experience with those platforms or equivalent tools is important. All documentation should align with NIST CSF language and be delivered in clear, editable formats.