Detection & Response Security Engineer (Remote)

doxy.me; Greater London; On-site; GBP 90,000 - 140,000; Full time

Benefits offered by this job

Competitive salary

Paid trainings and certifications

Advancement opportunities

401k match

Unlimited PTO

Job summary

Doxy.me is seeking a Security Engineer, Detection & Response in London with a remote option. You will own the detection and security operations, writing rules as code, building telemetry pipelines, and responding to threats across our cloud-native telehealth platform.

You’ll apply engineering principles to security, focusing on detection-as-code, automation, and scalable detection strategies. The role involves threat modeling and product security collaboration with minimal supervision.

Qualifications

• Experience writing and shipping detection rules using a detection-as-code approach.
• Strong programming skills in Python and/or TypeScript; comfortable with SQL for querying security data.
• Experience with AWS and cloud-native infrastructure.
• Familiarity with observability and monitoring platforms like Datadog.
• Understanding of attacker techniques and frameworks like MITRE ATT&CK.
• Experience with CI/CD pipelines and software engineering workflows.
• Comfort with threat modeling and application security concepts.

Responsibilities

• Own the detection lifecycle end-to-end: research threats, write rules as code, deploy via CI/CD, tune for precision, and maintain over time.
• Build and maintain telemetry pipelines that give visibility into application, infrastructure, and identity activity.
• Correlate signals across multiple data sources to improve detection accuracy and reduce false positives.
• Investigate and respond to security events, including containment, remediation, and post-incident analysis.
• Build automated response workflows that integrate with our cloud infrastructure and identity systems.
• Partner with product and engineering teams on threat modelling to identify detection opportunities early in the design process.

Skills

Detection-as-code

Python

TypeScript

SQL

AWS

Datadog

MITRE ATT&CK

CI/CD

Threat modeling

Application security

Tools

CI/CD pipelines

Job description

Doxy.me is seeking a Security Engineer, Detection & Response in London with a remote option. You will own the detection and security operations, writing rules as code, building telemetry pipelines, and responding to threats across our cloud-native telehealth platform.

You’ll apply engineering principles to security, focusing on detection-as-code, automation, and scalable detection strategies. The role involves threat modeling and product security collaboration with minimal supervision.