Principal Cyber Detection Engineer

InfoSec People Ltd; England; In loco; GBP 90.000 - 130.000; Tempo pieno

Descrizione del lavoro

InfoSec People Ltd is seeking a Principal Cyber Security Engineer to lead the evolution of endpoint detection, threat hunting and security monitoring capabilities for a major organisation in the UK. You will be the technical authority for Defender XDR and CrowdStrike Falcon across a complex enterprise while shaping strategy and remaining hands-on with engineering and detection development.

You will mentor engineers, collaborate with Incident Response and SOC teams, and drive architecture

Competenze

• Strong hands-on experience with Microsoft Defender XDR.
• Experience administering and engineering CrowdStrike Falcon.
• Detection Engineering experience.
• Threat Hunting and Incident Response experience.
• Strong understanding of MITRE ATT&CK.
• Experience designing and improving cyber security platforms.
• Ability to engage with both technical and senior stakeholders.

Mansioni

• Acting as the technical SME for Microsoft Defender XDR and CrowdStrike Falcon
• Designing and improving enterprise EDR and XDR capabilities
• Developing high-fidelity detections across Defender, Falcon and Sentinel
• Performing advanced threat hunting activities using KQL
• Working closely with Incident Response, Threat Intelligence and Security Operations teams
• Driving platform integrations and security architecture initiatives
• Supporting Detection-as-Code and CI/CD approaches
• Mentoring engineers and providing technical leadership across the cyber function

Conoscenze

Defender XDR

CrowdStrike Falcon

Threat Hunting

Incident Response

MITRE ATT&CK

Detection Engineering

Strumenti

KQL

Descrizione del lavoro

I'm working with a major organisation within the critical infrastructure and technology sector that is investing heavily in the growth of its Cyber Defence capability.

As part of this investment, they are looking to appoint a Principal Cyber Security Engineer to lead the evolution of their endpoint detection, threat hunting and security monitoring capabilities.

This is an opportunity to become the technical authority for Microsoft Defender XDR and CrowdStrike Falcon across a complex enterprise environment, helping shape strategy whilst remaining hands-on with engineering and detection development.

What you'll be doing

• Acting as the technical SME for Microsoft Defender XDR and CrowdStrike Falcon
• Designing and improving enterprise EDR and XDR capabilities
• Developing high-fidelity detections across Defender, Falcon and Sentinel
• Performing advanced threat hunting activities using KQL
• Working closely with Incident Response, Threat Intelligence and Security Operations teams
• Driving platform integrations and security architecture initiatives
• Supporting Detection-as-Code and CI/CD approaches
• Mentoring engineers and providing technical leadership across the cyber function

What we're looking for

• Strong hands-on experience with Microsoft Defender XDR
• Experience administering and engineering CrowdStrike Falcon
• Detection Engineering experience
• Threat Hunting and Incident Response experience
• Strong understanding of MITRE ATT&CK
• Experience designing and improving cyber security platforms
• Ability to engage with both technical and senior stakeholders