Security Automation & Detection Engineer

Whitehall Resources Ltd; Cambridge; On-site; GBP 45,000 - 75,000; Full time

Job summary

Whitehall Resources is seeking a Security Automation & Detection Engineer for a key client in Cambridge. This 6-month contract role involves collaboration with analysts to enhance security operations through automation and orchestration. The ideal candidate will possess 3+ years of cybersecurity experience and a deep understanding of SIEM and security tool integrations.

Qualifications

• 3+ years in cybersecurity or security software development.
• Solid understanding of security operations and detection engineering.
• Experience with cloud security tools like AWS and Azure.

Responsibilities

• Deliver SIEM detections and security automation for clients.
• Design and implement automated workflows for incident response.
• Build and maintain efficient security operations integrations.

Skills

Cybersecurity

Automation

Incident Response

SIEM Management

Orchestration Tools

Scripting Languages

Integration Solutions

Tools

Python

PowerShell

Microsoft Sentinel

SOAR Platforms

Job description

Social network you want to login/join with:

Security Automation & Detection Engineer, Cambridge

col-narrow-left

Location:

Cambridge, United Kingdom

Job Category:

Information Technology

EU work permit required:

Yes

col-narrow-right

Job Reference:

BBBH64107_1750779534

Job Views:

13

Posted:

24.06.2025

Expiry Date:

08.08.2025

col-wide

Job Description:

Security Automation & Detection Engineer

Whitehall Resources require a Security Automation & Detection Engineer to work with a key client on an initial 6 month contract.

*This role will involve on site work in Cambridge 2-3 days per week.

*Inside IR35.

Security Automation & Detection Engineer

Role Overview:
Utilising knowledge of security operations, incident response, and detection engineering, you will be responsible for the delivery of SIEM detections and security automations.
The successful candidate will be proficient in automation and orchestration tools (e.g., SOAR platforms, scripting languages like Python, PowerShell) and have experience with integrating security tools (e.g., SIEM, EDR, firewalls) APIs, and Case Management tools for data enrichment.

Responsibilities:
• Build security automations, logging, and SIEM detections to improve the CDO's efficiency, scalability, and incident response capabilities.
• Design, implement, and maintain automated workflows and playbooks to streamline CDO operations, including incident response, threat hunting, cyber threat intelligence and vulnerability management.
• Collaborate with CDO analysts to identify repetitive tasks and automate them to improve operational efficiency.
• Collaborate with Threat Intelligence, Incident Response, and Attack Surface Management to build and tune robust SIEM detections for both proactive and reactive response actions.
• Continuously evaluate automation solutions for performance, reliability, and scalability, making improvements, as necessary.
• Collaborate with third-party vendors and service providers to leverage automation opportunities and ensure successful integrations.
• Lead technical migration of log sources into Microsoft Sentinel SIEM.

Required Skills and Experience:
• Demonstrated ability in cybersecurity, with at least 3 years in a technical role in security operations and/or security software development.
• Solid understanding of security operations, automations standard processes, detection engineering and SIEM management.
• Experience with cloud security tools and platforms (e.g. Azure, AWS Google Cloud) and their integration into SOC operations.
• Vendor-specific certifications for SOAR platforms (e.g., Sentinel SOAR, Splunk SOAR, Palo Alto Cortex XSOAR).
• Experience contributing to large-scale, sprint-based, security automation and detection engineering projects.

“Nice To Have” Skills and Experience:
• Ability to develop and implement long-term automation strategies aligned with security operation objectives.
• Ability to translate technical concepts into clear, actionable insights for technical and non-technical partners.
• Meticulous focus on ensuring accuracy, reliability, and security in automation workflows!
• Consistent record of implementing automation and integration solutions in a SOC or similar environment!

All of our opportunities require that applicants are eligible to work in the specified country/location, unless otherwise stated in the job description.



Whitehall Resources are an equal opportunities employer who value a diverse and inclusive working environment. All qualified applicants will receive consideration for employment without regard to race, religion, gender identity or expression, sexual orientation, national origin, pregnancy, disability, age, veteran status, or other characteristics.