Security Engineer II - Detection Engineering

TN United Kingdom; London; Hybrid; GBP 50,000 - 90,000; Full time

Job summary

An established industry player is seeking a Cyber Security Detection Engineer to enhance its detection capabilities. In this pivotal role, you will lead the development and implementation of security measures, ensuring comprehensive coverage against evolving threats. Collaborating with various teams, you will drive initiatives that improve response efficiency and support during cyber incidents. This position offers excellent benefits, including a substantial annual bonus, generous holiday entitlement, and a commitment to diversity and inclusion in the workplace. Join us to make a significant impact in a dynamic environment!

Benefits

Annual bonus scheme (up to 20%)

Tesco Clubcard

25 days holiday plus personal day

Retirement savings plan (4%-7.5%)

Life Assurance (5x pay)

Various discounts and schemes

Qualifications

• Lead the development of cyber security detection capabilities.
• Collaborate with security operations and engineering teams.

Responsibilities

• Develop and drive cyber security detection capabilities.
• Support during cyber incidents and participate in threat hunts.

Skills

Threat-led assessment and validation of security threats

Understanding of threat frameworks (MITRE ATT&CK, Lockheed Martin Kill Chain)

Proficiency in detection development lifecycle

Ability to translate intelligence into actionable detection logic

Developing queries for threat detection

Knowledge of Windows, macOS, or Linux

Understanding attacker TTPs and security concepts

Experience with query languages (KQL, SPL)

Automation scripts (Python, PowerShell)

Education

Certifications like Security+, GIAC, CEH, SSCP

Tools

Python

PowerShell

Job description

Security Engineer II - Detection Engineering, London

Client:

Location:

London, United Kingdom

Job Category:

-

EU work permit required:

Yes

Job Reference:

59f4bde4359b

Job Views:

4

Posted:

02.05.2025

Expiry Date:

16.06.2025

Job Description:

About the role: As a Cyber Security Detection Engineer, you will lead the development, implementation, and continuous improvement of Tesco's cyber security detection capability. You will understand the changing threat landscape, identify opportunities for improvement in existing detections, establish new detections, and ensure comprehensive detection coverage for the organization. You will collaborate closely with security operations, engineering, and risk & compliance teams in a fast-paced, agile environment.

What is in it for you: We offer excellent benefits, including an annual bonus scheme (up to 20%), Tesco Clubcard, holiday entitlement starting at 25 days plus a personal day, retirement savings plan (4%-7.5%), Life Assurance (5x pay), and various discounts and schemes.

Responsibilities: You will develop and drive Tesco's cyber security detection capabilities, ensuring robustness, thorough testing, and relevance for operational teams. You will support during cyber incidents, participate in threat hunts, and work on automation and standardization to enhance response efficiency.

Security Engineering Skills:

• Threat-led assessment and validation of security threats
• Understanding of threat frameworks like MITRE ATT&CK, Lockheed Martin Kill Chain
• Proficiency in detection development lifecycle, code reviews, and security testing
• Ability to translate intelligence into actionable detection logic

Experience and Skills:

• Developing queries for threat detection
• Knowledge of Windows, macOS, or Linux
• Understanding attacker TTPs and security concepts
• Experience with query languages (KQL, SPL), automation scripts (Python, PowerShell)

Desirable Skills and Certifications:

• Knowledge of cloud security, attacker tools, and evasion techniques
• Programming experience, detection as code
• Certifications like Security+, GIAC, CEH, SSCP

About us:

Tesco aims to serve customers responsibly and sustainably, fostering diversity and inclusion. We offer flexible working patterns, blending office and remote work, and are committed to accessible recruitment processes.