Cyber Security Engineer

La Fosse; Greater London; On-site; GBP 60,000 - 80,000; Full time

Job summary

A technology solutions firm in Greater London is looking for a Security Operations Engineer to enhance cybersecurity capabilities. Responsibilities include designing threat detection solutions, optimizing security tools, and collaborating across teams to improve security measures. The ideal candidate will have strong experience with SIEM solutions, scripting, and maintaining security frameworks. Looking for an analytical thinker with excellent communication skills. This position offers competitive opportunities for growth and development.

Qualifications

• Experienced Security Engineer/Operations Engineer with a track record in threat detection.
• Proficient in scripting for automating security processes.
• Strong understanding of cybersecurity frameworks and incident analysis.

Responsibilities

• Design and implement advanced threat detection solutions.
• Collaborate with teams to enhance security measures.
• Develop and optimize threat detection rules and mechanisms.
• Improve security strategy and technology stack.
• Secure SaaS applications and infrastructures.
• Enhance threat hunting and incident response capabilities.

Skills

Threat detection engineering

Hands-on experience with SIEM solutions

Scripting languages (Python)

Infrastructure-as-code (Terraform, Pulumi)

Networking protocols

Analytical skills

Communication skills

Documentation skills

Job description

As a Security Operations Engineer you will be responsible for designing, implementing, and maintaining advanced threat detection solutions. Collaborating with the TechOps/IT team and various engineering squads, you will ensure robust security measures are applied, and capabilities are built to support comprehensive security logging and monitoring across our products and enterprise.

What you’ll do:

• Enhance threat detection & response by designing, implementing, and optimizing security tools, detection mechanisms, and secure configurations to identify and mitigate cybersecurity threats across multi cloud estate (AWS, GCP and Azure).
• Develop and optimize detection rules, signatures, and indicators of compromise (IOCs) across security platforms.
• Continuously improve security strategy & technology stack by staying up to date with industry trends, emerging threats, and evolving security best practices.
• Secure SaaS applications and infrastructure by implementing security best practices, access controls, and continuous monitoring.
• Collaborate with both non-engineering teams and IT to drive improvements by providing consultative expertise and offering advisory insights for business projects.
• Design, implement and maintain secured cloud security technologies alongside the Product Security team to achieve security and compliance objectives across multiple cloud technologies (e.g. AWS GuardDuty/Security Hub/Inspector, GCP Security Command Center).
• Enhance threat hunting, incident response, and security operations through continuous improvement in detection, analysis, and automation.

What you’ll need:

• You’re an accomplished Security Engineer or Security Operations Engineer with a track record of threat detection engineering.
• You bring hands‑on experience with SIEM solutions, EDR, intrusion detection/prevention systems, and other security tools.
• You're proficient in scripting languages (e.g. Python) for automating security processes and customizing security tools.
• You have prior experience with implementing infrastructure-as-code (Terraform, Pulumi).
• You have a strong understanding of networking protocols, cybersecurity frameworks, and attack vectors.
• You have exceptional analytical and problem‑solving skills with the ability to analyze complex security incidents and provide effective solutions.
• You have excellent communication skills with the ability to convey technical concepts to non‑technical stakeholders.
• You bring strong documentation skills for creating and maintaining threat detection rules, procedures, and incident reports.