Security engineer

We’re working with a global investment firm looking for a Senior Security Engineer to support the continued development and improvement of its security operations capability. This is a hands-on engineering role focused on strengthening threat detection, improving existing security tooling, expanding automation and integrating AI into security operations.

• Design, build and optimise detection rules and threat-hunting queries across SIEM and XDR platforms.
• Improve log-source coverage, telemetry quality and alert accuracy, reducing unnecessary noise.
• Develop security automation and integrate existing tools using Python and/or PowerShell.
• Review and optimise security tooling, identifying opportunities to improve configuration, integration and operational effectiveness.
• Conduct proactive threat hunting across endpoint, identity, cloud and SaaS environments.
• Support incident response activities, including complex and sensitive security investigations.
• Apply AI-assisted security capabilities to improve threat detection, investigation and response.
• Develop detections for emerging AI-related threats, including prompt injection, data leakage and AI-enabled phishing.
• Work closely with IT, Legal, HR and senior stakeholders on security incidents and operational improvements.

• Strong background in security engineering, detection engineering, security operations or incident response, typically with 6+ years of relevant experience.
• Hands-on experience with SIEM/XDR technologies and query languages such as KQL, SPL or CrowdStrike LogScale.
• Experience with endpoint security technologies, ideally including CrowdStrike, across Windows and macOS environments.
• Strong Microsoft 365 security experience, including investigating and responding to threats.
• Practical scripting and automation skills using Python and/or PowerShell.
• Experience integrating and optimising security tools within complex enterprise environments.
• Hands-on experience with enterprise AI tools and AI-assisted security operations.
• Good understanding of threat intelligence, attacker techniques and frameworks such as MITRE ATT&CK.
• Strong communication skills, sound judgement and the ability to deliver independently.

• Условий в вакансии нет