Location: UK (Remote or Hybrid)

*** Candidates need to be eligible for UK SC Clearance****

Overview

We're looking for a Security Engineer to join a growing cyber security team delivering security engineering and detection capabilities across a diverse range of customer environments.

You'll be responsible for building and improving security monitoring, detection content, automation workflows, and response capabilities. Working closely with analysts, engineers, and customer technical teams, you'll help improve visibility, strengthen defences, and develop scalable security solutions

What You'll Do

• Gather and understand customer security requirements.
• Onboard and validate data sources for monitoring and detection use cases.
• Assess telemetry quality, field mapping, and logging coverage.
• Map detection coverage against MITRE ATT&CK frameworks.
• Develop automation for enrichment, triage, response, and reporting.
• Design and improve detection use cases, playbooks, and security recommendations.
• Collaborate with customers and internal stakeholders to improve security outcomes.

What We're Looking For

Essential

• Commercial experience working with enterprise security technologies such as Microsoft Defender, Sentinel, CrowdStrike, SentinelOne, Palo Alto Networks, or similar platforms.
• Previous experience in systems administration, infrastructure, or technical support before moving into cyber security.
• Strong understanding of Windows and/or Linux internals, authentication, logging, and operating system fundamentals.
• Ability to automate repetitive tasks using PowerShell, Bash, Python, or similar scripting languages.
• Knowledge of Active Directory and/or Microsoft Entra ID, including privileged access concepts and identity administration.
• Strong written communication skills and a proactive approach to problem-solving.

Desirable

• Experience within both enterprise environments and managed security service providers (MSSPs).
• Detection engineering experience, including detection-as-code and coverage mapping.
• Cloud security experience across Azure, AWS, or GCP.
• Incident response or threat hunting experience.
• Purple team or offensive security exposure.
• Relevant industry certifications such as SC-200, AZ-500, or vendor security certifications.

What's On Offer

• Opportunity to build and improve security tooling and automation used at scale.
• Exposure to a broad range of customer environments and technologies.
• Ongoing development and mentorship opportunities.
• Clear progression into more senior engineering and security architecture roles.