Cyber Defense Engineer: Threat Detection & IR

DiverseJobsMatter; England; On-site; GBP 70,000 - 110,000; Full time

Job summary

Our client, an international law firm, is seeking a hands-on Cyber Security Engineer to strengthen security operations, threat detection, incident response and continuous improvement across cloud, endpoint, identity and data platforms.

You will work with Microsoft Sentinel and Security Copilot, contribute to detection engineering and security automation, and help identify and mitigate emerging threats including AI-driven and agentic attacks.

Qualifications

• Experience in cyber security operations, incident response or threat detection.
• Proven production experience with Microsoft Sentinel as a SIEM.
• Working knowledge of Security Copilot or similar AI-enabled tooling.
• Experience with outsourced SOC/MDR arrangements.
• Understanding of ransomware and cloud-based threats.

Responsibilities

• Support security monitoring, threat detection and incident response for high-severity events.
• Develop and tune detection logic in Microsoft Sentinel and build response workflows.
• Leverage Security Copilot to enhance investigations and triage.
• Design AI-driven tooling to improve threat detection and incident response.
• Identify and mitigate ransomware, identity-based and AI-driven threats.
• Collaborate with outsourced SOC and internal teams to improve security services.
• Develop incident response playbooks and automation for faster containment.
• Embed security into technical delivery and solution design.
• Support audits and client security assurance with strong evidence.

Skills

Cyber security operations

Incident response

Threat detection

Microsoft Sentinel

Security Copilot

Azure security

MDR / outsourced SOC

AI-driven tooling

Stakeholder communication

Education

Security+ or equivalent

SC-200 / AZ-500 / CySA+

Tools

Microsoft Sentinel

Security Copilot

Azure Security Center

Job description

Our client, an international law firm, is seeking a hands-on Cyber Security Engineer to strengthen security operations, threat detection, incident response and continuous improvement across cloud, endpoint, identity and data platforms.

You will work with Microsoft Sentinel and Security Copilot, contribute to detection engineering and security automation, and help identify and mitigate emerging threats including AI-driven and agentic attacks.