Remote Incident Response Engineer: SIEM & SOAR Expert

Wey Wey Web; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Prima is seeking a Security Engineer focused on Incident Response to join our Security Team. You will work within a vibrant engineering culture with 350+ engineers across software, infrastructure, operations and security.

The role emphasizes proactive monitoring, detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and

Qualifications

• Experience in security monitoring and incident response.
• Hands-on with SIEM/SOAR configurations and EDR/XDR tooling.
• Familiarity with cloud security (AWS) and container security (Kubernetes).

Responsibilities

• Configure EDR/XDR (CrowdStrike or equivalent), DLP and detections in SIEM.
• Define automated detections and enrich SIEM/SOAR workflows.
• Automate alert triage and incident response playbooks; collaborate with Security Engineering.
• Support security operations and tooling improvements across teams.

Skills

Python

Rust

Tools

SIEM platforms

SOAR platforms

CrowdStrike

MDM solutions

AWS

Kubernetes (EKS)

CI/CD systems

Infrastructure as Code

Pulumi (Python)

Google Chronicle

Web Application Firewalls (Cloudflare)

GCIH

GCFA

GREM

GCIA

Job description

Prima is seeking a Security Engineer focused on Incident Response to join our Security Team. You will work within a vibrant engineering culture with 350+ engineers across software, infrastructure, operations and security.

The role emphasizes proactive monitoring, detections, and automation to safeguard data and drivers on our platform. Remote-friendly with opportunities to collaborate across teams; required skills include SIEM/SOAR, EDR/XDR like CrowdStrike, and cloud security with AWS and