Security Detection & Response Engineer

Neura Market; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Innovative culture

Growth opportunities

Learning stipend

Social travel stipend

Annual offsite

Co-working stipend

Job summary

ElevenLabs is seeking a Security Detection & Response Engineer to join our security operations team in London. You will build and scale detection and incident response capabilities with an automation mindset, leveraging frontier AI models to reduce manual work and improve posture.

You’ll own detection rules, triage alerts, and drive investigations using Google Chronicle, JAMF MDM, Google Workspace, Okta, and GCP SCC.

Qualifications

• Proven experience in incident response and security operations, including triaging alerts, investigations, and leading response efforts.
• Strong background in detection engineering, including developing, tuning, and maintaining security detection rules and alerts.
• Hands-on experience with SIEM infrastructure, specifically with Google Chronicle.
• Proficiency in security monitoring across platforms, including JAMF MDM for macOS endpoints, Google Workspace, Okta and general SaaS applications.
• Experience with cloud security monitoring, particularly in Google Cloud (GCP) with familiarity in Google Cloud Security Command Center (SCC).
• Solid scripting skills (e.g., Python, Bash) for automating detection and response tasks.
• Deep understanding of common attack techniques, threat intelligence, and ability to translate them into actionable detections.
• Familiarity with security frameworks and best practices (e.g., MITRE ATT&CK, NIST Cybersecurity Framework).
• Excellent analytical and problem-solving skills, with a keen eye for detail and ability to connect disparate pieces of information during investigations.

Responsibilities

• Lead investigations and coordinate incident response efforts.
• Develop and maintain security detections and automation.
• Collaborate with engineering and security teams to improve security posture.

Skills

Incident response

Detection engineering

SIEM (Chronicle)

Cloud security (GCP SCC)

JAMF MDM (macOS)

Google Workspace

Okta & SaaS security

Python / Bash scripting

Threat intelligence

MITRE ATT&CK / NIST CSF

Analytical thinking

Tools

Google Chronicle

JAMF MDM

Google Workspace

Okta

Security Command Center (SCC)

Job description

ElevenLabs is seeking a Security Detection & Response Engineer to join our security operations team in London. You will build and scale detection and incident response capabilities with an automation mindset, leveraging frontier AI models to reduce manual work and improve posture.

You’ll own detection rules, triage alerts, and drive investigations using Google Chronicle, JAMF MDM, Google Workspace, Okta, and GCP SCC.