Senior Cyber Security Engineer – SIEM & Threat Detection

Gravitas Group; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Gravitas Group in the United Kingdom seeks a Cyber Security Engineer to join our Proactive Security team, focusing on building security tech stacks to mitigate threats with offensive and preventive measures. You will develop threat models, manage SIEM systems, and implement detection use cases while collaborating with incident response to protect information assets in a hybrid UK workplace.

The role demands strong scripting (PowerShell, Python), cloud security knowledge across Azure/AWS/GCP, and

Qualifications

• Right to work in the UK.
• Proven experience with SIEM implementation, configuration, and custom rule creation.
• Minimum of 5+ years in Security Engineering or similar roles.
• Extensive hands-on experience with EDR and SIEM technology stacks.
• In-depth knowledge of Active Directory security principles, Windows event collection, and network security.
• Proficiency in scripting (PowerShell, Python).
• Familiarity with cloud security principles in Azure, GCP, and AWS.
• Knowledge of operating systems including Windows Server and UNIX variants.
• Industry certifications such as AZ-500, SC-200, SC-900, or similar.
• On-site based in the UK, working in a hybrid environment.

Responsibilities

• Develop and maintain threat models for information assets and services.
• Build and optimise security tools for detection, remediation, and orchestration.
• Design, implement, and maintain SIEM workspaces and develop custom queries for threat hunting and incident investigation.
• Develop, test, and deploy advanced threat detection use cases based on vulnerability insights.
• Analyse security controls and collaborate with the SOC team to enhance detection logic.
• Provide security guidance on application and infrastructure protection.
• Automate security tasks using scripting languages such as PowerShell and Python.
• Manage security infrastructure related to privileged access, session management, and cloud security principles.

Skills

Threat modeling

Security tooling

SIEM tuning

Threat detection

SOC collaboration

App/infra security

Scripting

Privilege access

Cloud security

Operating systems

Tools

EDR

SIEM

Active Directory

PowerShell

Python

Azure

AWS

GCP

Windows Server

UNIX

Job description

Gravitas Group in the United Kingdom seeks a Cyber Security Engineer to join our Proactive Security team, focusing on building security tech stacks to mitigate threats with offensive and preventive measures. You will develop threat models, manage SIEM systems, and implement detection use cases while collaborating with incident response to protect information assets in a hybrid UK workplace.

The role demands strong scripting (PowerShell, Python), cloud security knowledge across Azure/AWS/GCP, and