Principal Cyber Defense Engineer - EDR/XDR Lead

InfoSec People Ltd; England; Sur place; GBP 90 000 - 130 000; Plein temps

Résumé du poste

InfoSec People Ltd is seeking a Principal Cyber Security Engineer to lead the evolution of endpoint detection, threat hunting and security monitoring capabilities for a major organisation in the UK. You will be the technical authority for Defender XDR and CrowdStrike Falcon across a complex enterprise while shaping strategy and remaining hands-on with engineering and detection development.

You will mentor engineers, collaborate with Incident Response and SOC teams, and drive architecture

Qualifications

• Strong hands-on experience with Microsoft Defender XDR.
• Experience administering and engineering CrowdStrike Falcon.
• Detection Engineering experience.
• Threat Hunting and Incident Response experience.
• Strong understanding of MITRE ATT&CK.
• Experience designing and improving cyber security platforms.
• Ability to engage with both technical and senior stakeholders.

Responsabilités

• Acting as the technical SME for Microsoft Defender XDR and CrowdStrike Falcon
• Designing and improving enterprise EDR and XDR capabilities
• Developing high-fidelity detections across Defender, Falcon and Sentinel
• Performing advanced threat hunting activities using KQL
• Working closely with Incident Response, Threat Intelligence and Security Operations teams
• Driving platform integrations and security architecture initiatives
• Supporting Detection-as-Code and CI/CD approaches
• Mentoring engineers and providing technical leadership across the cyber function

Connaissances

Defender XDR

CrowdStrike Falcon

Threat Hunting

Incident Response

MITRE ATT&CK

Detection Engineering

Outils

KQL

Description du poste

InfoSec People Ltd is seeking a Principal Cyber Security Engineer to lead the evolution of endpoint detection, threat hunting and security monitoring capabilities for a major organisation in the UK. You will be the technical authority for Defender XDR and CrowdStrike Falcon across a complex enterprise while shaping strategy and remaining hands-on with engineering and detection development.

You will mentor engineers, collaborate with Incident Response and SOC teams, and drive architecture