Security Operations Detection & Tooling Engineer

OptumUK; United Kingdom; On-site; GBP 70,000 - 110,000; Full time

Job summary

EMIS / Optum UK is seeking a Security Operations Detection, Tooling & Assurance Engineer. You will own the performance, optimisation and continuous improvement of security tooling, detections and security operations processes across a complex healthcare environment.

This hands-on role focuses on improving threat detection, reducing false positives and strengthening investigation workflows. You will provide operational assurance for SOC activities delivered by internal teams and MSSPs, and

Qualifications

• Hands-on security professional with tooling and operations experience.
• Experience analysing alerts, incidents and investigations to drive improvements.
• Ability to work with analysts, engineering teams and MSSPs to improve detection and response.

Responsibilities

• Own and optimise core security platforms (SIEM, EDR, NDR, SASE).
• Design, build and tune detections to improve alert fidelity.
• Review alerts and incidents to identify trends and improvements.
• Collaborate with Cyber Defence analysts to improve monitoring and playbooks.
• Provide assurance of SOC activities with MSSPs.
• Engage with partners to improve monitoring and response processes.
• Develop automation to streamline workflows across Security Operations.
• Produce reports on detection effectiveness and coverage.

Skills

Security Operations

Detection Engineering

Security Tooling

Incident Response

Threat Detection

Collaboration

Automation

MSSP oversight

MITRE ATT&CK

Education

CySA+, SC-200, GIAC certifications

Tools

Darktrace

CrowdStrike

Google SecOps

Job description

EMIS / Optum UK is seeking a Security Operations Detection, Tooling & Assurance Engineer. You will own the performance, optimisation and continuous improvement of security tooling, detections and security operations processes across a complex healthcare environment.

This hands-on role focuses on improving threat detection, reducing false positives and strengthening investigation workflows. You will provide operational assurance for SOC activities delivered by internal teams and MSSPs, and