Cyber Security Engineer Lead – Threat Detection & Automation

Nicoll Curtin; United Kingdom; Hybride; GBP 70 000 - 80 000; Plein temps

Résumé du poste

Nicoll Curtin is assisting a leading international financial services organisation in recruiting a Cyber Security Engineer to join its Proactive Security function in London. The role focuses on threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment.

The position is permanent with a salary in the £70k–£80k range, based in London with hybrid working.

Qualifications

• 5+ years in Security Engineering, Security Operations, or related cyber security discipline.
• Strong hands-on experience with SIEM platforms, EDR, and detection engineering.
• Experience developing and supporting SOAR capabilities.
• Solid understanding of Active Directory security and Windows event logging.
• Proficiency with scripting (PowerShell and/or Python).
• Good networking knowledge: firewalls, VPNs, proxies, and security protocols.
• Experience securing Azure, AWS, or GCP environments.
• Knowledge of NIST, MITRE ATT&CK, and Cyber Kill Chain frameworks.
• Excellent communication and stakeholder management.

Responsabilités

• Threat modelling and security engineering to strengthen proactive defence initiatives.
• Design, implement, and maintain SIEM workspaces, data connectors, analytics rules, dashboards, and playbooks.
• Develop advanced threat hunting queries and investigation workflows.
• Onboard and optimise security log sources across on-premises and cloud environments.
• Improve detection accuracy through tuning and use-case development.
• Lead security tooling integrations and orchestration initiatives.
• Develop and enhance SOAR capabilities.
• Provide expert guidance on application and infrastructure security.
• Contribute to security playbooks, response procedures, and operational improvements.

Connaissances

SIEM

EDR

Threat hunting

SOAR

PowerShell

Python

AD security

Networking basics

Cloud security

MITRE ATT&CK

Communication

Description du poste

Nicoll Curtin is assisting a leading international financial services organisation in recruiting a Cyber Security Engineer to join its Proactive Security function in London. The role focuses on threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment.

The position is permanent with a salary in the £70k–£80k range, based in London with hybrid working.