Apex Talent Solutions · cheshire, MA

Salary
Posted
Jul 5, 2026
Location
cheshire, MA
Last confirmed open
Jul 21, 2026

What this job asks for AI summary

A contract role centred on building out a Security Incident Response capability inside a large enterprise using ServiceNow SecOps/SIR. Day-to-day work covers designing and configuring SIR workflows, integrating security tooling such as SIEM and SOAR platforms, building automation to cut manual effort, and producing dashboards, documentation, and training to hand the capability over to operational teams. Suited to someone with hands-on ServiceNow SIR and cyber incident management experience.

Senior level · National · Contract

Must have (3)
ServiceNowServiceNow SIRServiceNow SecOps
Nice to have (3)
SIEMSOARThreat Intelligence

We read this from the posting text with AI. Skim the description below before ruling yourself out.

How this req sits in the market our data

What the occupation pays Median $132,021 (middle half $99,961–$167,095).

Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.

Why we read it this way (8)

This role is based in Warrington, UK (hybrid, 2 days onsite) — outside the US; US compensation benchmarks do not apply.

The contract is explicitly Outside IR35, an important classification for UK contractors.

No compensation rate is stated in the posting.

SOC classification is Medium confidence: the role is primarily a security/incident-response practitioner (15-1212) but involves significant platform configuration, workflow development, and automation coding on ServiceNow, which has a software-development flavour (15-1252). The security domain and incident-response framing were treated as primary.

SIEM, SOAR, and Threat Intelligence integrations are listed under 'Desirable Experience' and are marked as preferred accordingly.

SOC operations knowledge and stakeholder engagement are listed as required but are domain knowledge and soft skills rather than named technologies, so they are not emitted as skills.

Posting is for a contract engagement — the market benchmarks below price full-time roles, so read the comp comparison with that in mind.

This role's work location reads as outside the US — the candidate pool, comp, and contention benchmarks here are US-only (BLS employment, Adzuna/USAJOBS demand, and certified H-1B wages), so treat them as a rough US reference, not a local market.

Read the full posting

The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.

Apply

Apply on employer site ↗