Cyber Defense Engineer

VIQU IT; City Of London; Hybrid; GBP 59,000 - 72,000; Full time

Job summary

VIQU IT in London is seeking a Cyber Defence Engineer to strengthen security tooling across cloud and on‑prem environments, focusing on threat detection, monitoring and visibility.

You will work closely with offensive and defensive security teams to turn threat hunting findings and threat intelligence into practical security improvements, while collaborating with Cyber Defence, Infrastructure and Architecture teams.

Qualifications

• Experience in Cyber Defence Engineering or similar security engineering roles.
• Hands-on with SIEM platforms, preferably Microsoft Sentinel and Defender.
• Proficiency in KQL for custom queries and detection logic.
• Experience with Azure and cloud security services.
• Scripting or automation experience using Python or PowerShell.
• Understanding of threat intelligence, threat hunting and MITRE ATT&CK.

Responsibilities

• Develop and improve threat detection capabilities across SIEM, endpoint and cloud security platforms.
• Configure and optimise security tooling to improve monitoring, visibility and threat detection.
• Develop custom queries, analytics and alerting to identify potential security threats.
• Maintain and validate logging and telemetry pipelines across cloud and on-prem environments.
• Support vulnerability management, application security testing and attack surface management.
• Implement recommendations from red team exercises, threat hunting and threat intelligence activities.
• Translate emerging threats into improved detection rules and security controls.
• Support security tool integrations and automation initiatives.
• Collaborate with Cyber Defence, Infrastructure and Architecture teams to strengthen security capabilities.

Skills

Cyber Defence Engineering

Security Engineering

Detection Engineering

Threat hunting

Python/Powershell scripting

Tools

Microsoft Sentinel

Microsoft Defender

KQL

Azure Security Services

Job description

Cyber Defence Engineer

London – Hybrid (3 DPW)

Up to £65,000

VIQU are partnering with a leading organisation looking to strengthen its Cyber Defence capabilities through the appointment of a Cyber Defence Engineer. This role will focus on engineering and optimising security tooling across cloud and on‑premises environments, improving threat detection, monitoring and visibility. Working closely with offensive and defensive security teams, you will turn findings from threat hunting, red team exercises and threat intelligence into practical security improvements.

Key Responsibilities of the Cyber Defence Engineer:

• Develop and improve threat detection capabilities across SIEM, endpoint and cloud security platforms


• Configure and optimise security tooling to improve monitoring, visibility and threat detection


• Develop custom queries, analytics and alerting to identify potential security threats


• Maintain and validate logging and telemetry pipelines across cloud and on‑premises environments


• Support vulnerability management, application security testing and attack surface management


• Implement recommendations from red team exercises, threat hunting and threat intelligence activities


• Translate emerging threats into improved detection rules and security controls


• Support security tool integrations and automation initiatives


• Collaborate with Cyber Defence, Infrastructure and Architecture teams to strengthen security capabilities

Key Experience Required of the Cyber Defence Engineer:

• Experience in Cyber Defence Engineering, Security Engineering, Detection Engineering or a similar role


• Hands‑on experience with SIEM platforms, ideally Microsoft Sentinel and Microsoft Defender


• Proficiency in Kusto Query Language (KQL), including custom queries and detection logic


• Experience working with Azure and associated cloud security services


• Strong understanding of security monitoring, logging and threat detection


• Experience with vulnerability scanning, vulnerability management or application security testing tools


• Scripting or automation experience using Python, PowerShell or similar


• Understanding of threat intelligence, threat hunting and the MITRE ATT&CK framework


• Strong analytical and problem‑solving skills, with the ability to work collaboratively across technical teams