Security Engineer

Ocho People; Belfast City District; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

Ocho People is seeking a Security Engineer specializing in MDR and cloud security, based in Belfast, UK. You will own UK-hours coverage, lead complex investigations, and serve as the senior escalation point for critical incidents while working directly with customers.

Join a fast-growing cloud security platform and help shape the UK function, collaborating with analysts and engineers across a global team in a high-ownership, autonomous startup environment.

Qualifications

• Based in Belfast, Northern Ireland with in-office presence 3 days per week.
• Hands-on cybersecurity experience in cloud environments with real-world exposure.
• Strong knowledge of detection engineering, incident response, and cloud threat analysis (AWS, GCP, or Azure).

Responsibilities

• Own UK-hours MDR coverage and end-to-end monitoring, triage, and response.
• Lead in-depth security investigations across supply chain, API, malware, and runtime scenarios; document outcomes and build playbooks.
• Handle complex incidents escalated from Tier 1/2 and engage directly with customers under pressure.
• Conduct proactive reviews of customer environments to identify risks and improvement opportunities.
• Translate security findings into clear, actionable recommendations for customers.
• Collaborate with Analysts, Research, and Backend Engineering to improve detection quality and platform capabilities.
• Contribute to AI-driven detection model development and tuning.
• Stay updated on emerging threats and cloud security best practices.

Skills

Detection engineering

Incident response

Cloud security

Customer communications

Linux

Python or Bash

Docker / Kubernetes

On-call readiness

Security investigations

Education

BSc in Computer Science or Information Security

Tools

AWS

GCP

Azure

Job description

Security Engineer (MDR / Cloud Security)

At-a-Glance

• Founding UK member of the security organisation at a fast-growing, next-generation cloud security platform
• Specialism in MDR, detection engineering, incident response, and cloud threat analysis (AWS, GCP, or Azure)
• Hybrid, Belfast-based ... 3 days per week in office ... must already be based in Northern Ireland
• Salary: to be confirmed ... contact Luke for details
• Clear path toward technical or team leadership as the UK presence scales

About the Company

Our client is a next-generation cloud security platform using runtime context and eBPF-powered sensor technology to identify and prioritise critical risks across cloud environments. Their platform spans agentless cloud posture discovery, real-time threat protection, and integrated API security ... delivering comprehensive, cost-effective protection from misconfigurations to active malware defence. Backed by strong credentials and growing quickly, they are building out their UK presence and bringing deep security expertise closer to their European customer base.

The Role

This is a high-ownership, senior-level position joining an established MDR team as the founding UK member of the security organisation. You will own UK-hours coverage independently, lead complex security investigations, and act as the senior escalation point for critical incidents ... all while working directly with customers to translate findings into clear, actionable guidance. The role carries real weight from day one and is structured with a clear path toward technical or team leadership as the UK function scales. It suits someone who is genuinely passionate about cloud security, comfortable operating with autonomy in a fast-paced startup environment, and confident engaging directly with customers under pressure.

Key Responsibilities

• Own UK-hours MDR coverage independently, taking end-to-end responsibility for monitoring, triage, and response
• Lead in-depth security investigations across supply chain, API, malware, and runtime attack scenarios, documenting outcomes and building playbooks
• Handle complex and critical incidents escalated from Tier 1/2, including live, high-pressure customer engagements
• Conduct proactive reviews of customer environments to identify risks, exposed attack surfaces, and improvement opportunities
• Participate in recurring customer meetings, translating security findings into clear, actionable recommendations
• Collaborate with Security Analysts, Research, and Backend Engineering teams to improve detection quality and platform capability
• Contribute to the development and fine-tuning of AI-driven detection models, using machine learning to sharpen investigation accuracy
• Stay current with emerging threats, attack techniques, and cloud security best practices, feeding insights back into team knowledge

What You'll Need

Essential:

• Based in Belfast, Northern Ireland ... this role requires in-office presence 3 days per week and visa sponsorship is not available
• Solid, hands-on cybersecurity experience, ideally gained at a leading cloud or cloud security company with real-world cloud environment exposure
• Strong working knowledge of detection engineering, incident response, and threat analysis ... able to explain attack techniques in depth (supply chain, API, malware, runtime)
• Hands-on experience with at least one major cloud platform (AWS, GCP, or Azure) and container technologies (Docker / Kubernetes)
• Comfortable and hands-on with Linux; familiar with networking fundamentals and scripting in Python or Bash
• Strong communication skills with proven ability to engage directly with customers, including under pressure or pushback
• Willing to participate in a shared on-call rotation (infrequent escalations; availability required for nights, weekends, or holidays during rotation week)

Desirable / Nice to Have:

• Windows knowledge
• Sc. in Computer Science or Information Security

Why Apply?

• Founding UK role ... genuine opportunity to shape the UK security function from the ground up
• Clear progression path toward technical lead or team lead as the UK presence grows
• Hybrid working ... 3 days in a modern Belfast office, 2 days remote
• Work on real, complex cloud security challenges with a product used by enterprise customers
• High-ownership, low-bureaucracy environment ... decisions move fast and your work has direct impact
• Collaborate with world-class security researchers, analysts, and engineers across a global team