AVP Cyber Security Engineer: Threat Detection & Automation

Sanderson; Greater London; On-site; GBP 72,000 - 88,000; Full time

Job summary

Sanderson is seeking a hands-on Cyber Security Engineer (AVP) to strengthen security across a global financial services tech stack. You will design and enhance SIEM capabilities, develop threat detection use cases and drive automation to improve detection and response.

The role collaborates with SOC, infra and engineering teams to harden cloud and on‑prem environments. The ideal candidate has 5+ years in security engineering, strong Microsoft Sentinel experience, and practical scripting skills

Qualifications

• 5+ years in Cyber Security Engineering or similar technical security role.
• Hands-on experience with SIEM and threat detection.
• Cloud security experience across Azure/AWS/GCP.
• Certs such as SC-200, AZ-500 or CompTIA Security+ advantageous.
• Proficient in PowerShell and Python scripting.

Responsibilities

• Design, implement and enhance SIEM capabilities, including detection rules and log ingestion.
• Develop and maintain advanced threat detection use cases and proactive threat-hunting capabilities.
• Build and improve security automation and orchestration (SOAR) processes.
• Conduct threat modelling, risk assessments and security control reviews.
• Develop scripts and automated remediation solutions using PowerShell and Python.
• Collaborate with SOC, infrastructure and engineering teams to improve monitoring and incident response.
• Integrate and optimise security technologies across cloud and on‑prem environments.

Skills

Threat detection

Security automation

PowerShell

Python

AD security

Threat modeling

Incident response

Tools

Microsoft Sentinel

SOAR

EDR

Job description

Sanderson is seeking a hands-on Cyber Security Engineer (AVP) to strengthen security across a global financial services tech stack. You will design and enhance SIEM capabilities, develop threat detection use cases and drive automation to improve detection and response.

The role collaborates with SOC, infra and engineering teams to harden cloud and on‑prem environments. The ideal candidate has 5+ years in security engineering, strong Microsoft Sentinel experience, and practical scripting skills