Security engineer in detection and incident response

Fuse is an AI-first energy company on a mission to make energy abundant and affordable, fast. We combine first-principles thinking with cutting-edge technology to build a radically better energy system. About The Role We're looking for a Senior or Lead Security Engineer (Detection & Response) to build out the next generation of detection systems.

• Own security monitoring and detection across AWS, identity, endpoints, SaaS, networks and data center environments
• Build and maintain the telemetry and logging pipelines needed to detect security incidents, and continuously test and improve detection coverage
• Lead security investigations and incident response from detection through containment, recovery and post-mortem
• Proactively hunt for threats and identify gaps in our visibility, controls and detection coverage
• Build automation to improve detection, investigation and response, making effective use of AI and emerging tools to improve efficiency and capabilities.
• Work closely with IT and Engineering to turn security findings into preventative controls and better system design
• Develop and test incident response playbooks and continuously improve our response capability
• Implement and enhance internal AI agents and security bots that assist with monitoring, investigations, reporting, and other security operation tasks.

• Significant hands-on experience in detection engineering, security engineering, incident response, threat hunting or a similar technical role
• Strong understanding of cloud environments, ideally AWS, and how to monitor them for unauthorised or suspicious activity
• Strong networking fundamentals and an understanding of how attackers move through networks and systems
• Strong understanding of attacker tradecraft and the ability to turn it into useful, high-signal detections
• Experience investigating real security incidents and taking ownership through to resolution
• Strong scripting or programming skills, ideally Python, and a habit of automating repetitive work
• Experience with security monitoring and response tooling such as SIEM, EDR, SOAR or equivalent
• Strong systems thinking and a natural instinct for asking “how would we know if this was compromised?”
• Comfortable working autonomously and closely with IT and Engineering teams
• Curious about emerging AI capabilities and proactive in experimenting with AI-assisted development, automation and security workflows.
• Будет плюсом: AWS security telemetry including CloudTrail, GuardDuty, VPC Flow Logs and IAM; Detection-as-code, Sigma, Git-based detections and automated testing; CrowdStrike, SentinelOne, Defender or another EDR; Network security monitoring, PCAP, NetFlow/sFlow or firewall telemetry; Digital forensics, threat intelligence, purple teaming or security validation; Data centre or colocation security, including OOB networks and BMC/IPMI; Security automation, AI-assisted development or applying AI/LLMs to security engineering and operations; Energy, trading, fintech, critical infrastructure or other high-value-target environments

• Competitive salary and eligibility for equity
• Biannual bonus scheme
• Fully expensed tech to match your needs
• Private health insurance
• Breakfast and dinner allowance for office-based employees
• As we hire globally, benefits vary by location.