This is a technology and resource solutions business operating across secure government, defence, and national security environments, helping organisations deliver mission-critical programmes that protect and support the UK's most important services. The business has built a strong reputation in complex, high-security settings, working where operational integrity and delivery excellence genuinely matter.

‍

The Security Operations Centre and engineering function sits at the heart of the business, and this role has been created to set the engineering direction, standards, and quality across detection, telemetry, and automation at a senior level.

As Security Engineer, you'll design, build, and maintain scalable security detection and response capabilities across the organisation, taking an engineering-led approach to detection-as-code, automation, and telemetry optimisation across cloud and endpoint platforms.

• Design and implement scalable security architectures across SIEM, XDR, and cloud platforms
• Develop and maintain detection logic using KQL, APIs, and automation frameworks
• Improve telemetry coverage and data quality across security platforms
• Lead integration of new data sources and security tooling
• Drive automation of response and enrichment workflows via SOAR and playbooks
• Collaborate with SOC leadership to improve detection effectiveness and operational outcomes
• Own the engineering backlog, prioritisation, and delivery across detection and platform improvements
• Maintain version control, CI/CD approaches, and documentation standards
• Evaluate and onboard new security technologies and capabilities

• Strong experience in security engineering or detection engineering
• Hands-on experience with SIEM and XDR tooling, including Microsoft Sentinel and Microsoft Defender for Endpoint
• Experience with infrastructure-as-code and CI/CD pipelines
• Strong scripting and programming skills, including Python and PowerShell
• Deep understanding of security telemetry and logging pipelines
• Experience designing scalable cloud security solutions
• Strong understanding of Windows and Linux operating systems
• Desirable: experience with API integrations and automation frameworks, knowledge of data pipelines such as Event Hub or log streaming, exposure to multi-tenant or MSSP environments, and certifications such as AZ-500 or SC-100

• Competitive salary of £70,000 - £80,000
• Opportunity to work with leading enterprise security technologies and major UK clients
• Collaborative and highly technical working environment
• Ongoing training and professional development
• Clear progression within a growing cybersecurity function