Remote Cyber Defense Engineer — AI-Driven SOC

Mosaec; Manchester; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Competitive salary

Pension

Remote UK work allowed

Bupa Private Healthcare

Medicash Benefit

Life insurance

Job summary

BeyondTrust is seeking a Cyber Defense Engineer to join our Cyber Defense Operations team. You will defend our enterprise infrastructure and customers' products, monitor security events, and collaborate with threat hunters and incident responders.

The role emphasizes AI-augmented detection, triage, and response workflows on a global scale. You will contribute to IR playbooks, detection engineering, and runbooks, while participating in on-call rotations and post-incident reviews.

Qualifications

• 4+ years in a SOC, security operations, or IR role.
• Understanding of MITRE ATT&CK, networks, and endpoint behavior.
• Experience with at least one SIEM platform and writing detection queries.
• Familiarity with EDR platforms and cloud environments (IaaS preferred).
• Comfort using AI systems in security workflows.
• Strong written communication for technical and non-technical audiences.

Responsibilities

• Monitor and triage security alerts across SIEM/EDR/CSPM for corporate and product environments.
• Lead or participate in incident response engagements from detection through remediation.

Skills

SOC experience

MITRE ATT&CK

SIEM experience

EDR experience

AI in security

Strong written communication

Tools

SIEM platforms

EDR tools

SOAR platforms

Job description

BeyondTrust is seeking a Cyber Defense Engineer to join our Cyber Defense Operations team. You will defend our enterprise infrastructure and customers' products, monitor security events, and collaborate with threat hunters and incident responders.

The role emphasizes AI-augmented detection, triage, and response workflows on a global scale. You will contribute to IR playbooks, detection engineering, and runbooks, while participating in on-call rotations and post-incident reviews.