This is a specialist cyber security business focused on engineering-led security operations, working with enterprise clients across the UK. The team is technically strong, with deep expertise across detection engineering, SIEM, XDR, and cloud security platforms. The business operates at the more demanding end of the market, delivering scalable, modern security capabilities to organisations where the stakes are high.

This is a growing function with genuine technical ambition. Detection-as-code, automation, and telemetry optimisation are not aspirational here, they are the working standard. If you want to do serious security engineering work without legacy constraints, this is a business worth looking at.

As Senior Security Engineer, you’ll take ownership of engineering direction, standards, and quality across detection, telemetry, and automation, designing and building scalable security capabilities across cloud and endpoint platforms.

• Design and implement scalable security architectures across SIEM, XDR, and cloud platforms
• Develop and maintain detection logic using KQL, APIs, and automation frameworks
• Improve telemetry coverage and data quality across security platforms
• Lead integration of new data sources and security tooling
• Drive automation of response and enrichment workflows through SOAR and playbook development
• Collaborate with SOC leadership to improve detection effectiveness and operational outcomes
• Own engineering backlog, prioritisation, and delivery across detection and platform improvements
• Maintain version control, CI/CD approaches, and documentation standards
• Evaluate and onboard new security technologies and capabilities

• Strong experience in security engineering or detection engineering
• Hands-on experience with SIEM and XDR tooling, including Microsoft Sentinel and Microsoft Defender for Endpoint
• Experience with infrastructure-as-code and CI/CD pipelines
• Strong scripting and programming skills in Python, PowerShell, or similar
• Deep understanding of security telemetry and logging pipelines
• Experience designing scalable cloud security solutions
• Strong understanding of Windows and Linux operating systems
• Experience with API integrations and automation frameworks is desirable
• Knowledge of data pipelines such as Event Hub and log streaming is desirable
• Exposure to multi-tenant or MSSP environments is desirable
• Relevant certifications such as AZ-500 or SC-100 are desirable

• Fully remote working
• Opportunity to work with leading enterprise security technologies and major UK clients
• Genuine ownership of engineering direction within a growing cyber security function
• Collaborative and highly technical working environment
• Ongoing training and professional development
• Clear progression within a growing cyber security business