Cyber Security Engineer

Sanderson; Greater London; On-site; GBP 72,000 - 88,000; Full time

Job summary

Sanderson is seeking a hands-on Cyber Security Engineer (AVP) to strengthen security across a global financial services tech stack. You will design and enhance SIEM capabilities, develop threat detection use cases and drive automation to improve detection and response.

The role collaborates with SOC, infra and engineering teams to harden cloud and on‑prem environments. The ideal candidate has 5+ years in security engineering, strong Microsoft Sentinel experience, and practical scripting skills

Qualifications

• 5+ years in Cyber Security Engineering or similar technical security role.
• Hands-on experience with SIEM and threat detection.
• Cloud security experience across Azure/AWS/GCP.
• Certs such as SC-200, AZ-500 or CompTIA Security+ advantageous.
• Proficient in PowerShell and Python scripting.

Responsibilities

• Design, implement and enhance SIEM capabilities, including detection rules and log ingestion.
• Develop and maintain advanced threat detection use cases and proactive threat-hunting capabilities.
• Build and improve security automation and orchestration (SOAR) processes.
• Conduct threat modelling, risk assessments and security control reviews.
• Develop scripts and automated remediation solutions using PowerShell and Python.
• Collaborate with SOC, infrastructure and engineering teams to improve monitoring and incident response.
• Integrate and optimise security technologies across cloud and on‑prem environments.

Skills

Threat detection

Security automation

PowerShell

Python

AD security

Threat modeling

Incident response

Tools

Microsoft Sentinel

SOAR

EDR

Job description

Cyber Security Engineer (AVP) | £80,000 | Financial Services

Are you a hands-on Cyber Security Engineer with strong experience in SIEM, threat detection and security automation?

I'm working with a well-established, global financial services organisation looking to appoint an experienced Cyber Security Engineer to join its proactive security function.

This is an exciting opportunity to play a key role in developing and enhancing security capabilities, improving threat detection and implementing preventative security controls across a complex technology environment.

The Role

You'll be responsible for strengthening the organisation's security infrastructure, developing detection capabilities and driving automation across the security technology stack.

Key responsibilities include:

• Design, implement and enhance SIEM capabilities, including detection rules, log ingestion and monitoring.
• Develop and maintain advanced threat detection use cases and proactive threat-hunting capabilities.
• Build and improve security automation and orchestration (SOAR) processes.
• Conduct threat modelling, risk assessments and security control reviews.
• Develop scripts and automated remediation solutions using PowerShell and Python.
• Work closely with SOC, infrastructure and engineering teams to improve security monitoring and incident response.
• Integrate and optimise security technologies across cloud and on-premise environments.
• Support identity-based threat detection, privileged access security and vulnerability mitigation.

What We're Looking For

• 5+ years' experience in Cyber Security Engineering, Security Automation or a similar technical security role.
• Strong hands-on experience with SIEM technologies, ideally Microsoft Sentinel.
• Experience developing detection rules, custom queries and threat-hunting use cases.
• Knowledge of EDR, SOAR and security monitoring technologies.
• Scripting experience with PowerShell and/or Python.
• Good understanding of Active Directory security, Windows event logging and network security.
• Familiarity with cloud security environments such as Azure, AWS or GCP.
• Understanding of security frameworks including MITRE ATT&CK and NIST.
• Relevant certifications such as SC-200, AZ-500 or CompTIA Security+ would be advantageous.

Why Consider This Opportunity?

This is a fantastic opportunity for a technically driven security professional who enjoys being hands-on and wants to have a genuine impact on an organisation's security posture.

You'll be joining an established cyber security function, working across a varied technology environment with opportunities to influence security tooling, automation and threat detection strategy.

#CyberSecurityJobs #SecurityEngineer #CyberSecurity #MicrosoftSentinel #SIEM #ThreatDetection #SecurityAutomation #FinancialServices #CyberRecruitment