Senior Cybersecurity Engineer: Cloud, SIEM & IR

CAA Club Group; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Creative Artists Agency (CAA) is seeking an accomplished security leader in London to drive end-to-end security services across enterprise systems. You will shape threat detection, risk mitigation and response, and align tooling with policy, compliance, and business needs in a fast-paced environment.

The role requires deep experience in information security, Azure, SIEM, and secure development practices, with a drive for measurable, demonstrable improvements in security controls and incident

Qualifications

• Minimum 10 years in IT with mixed infra and development focus.
• At least 2 years in information security.
• Scripting in PowerShell, Python or JavaScript.
• Experience deploying and operating security tooling and SIEMs.
• Strong understanding of security controls and Azure cloud.

Responsibilities

• Define and evolve security tooling aligned to architecture and risk objectives.
• Evaluate threats against controls and ensure effectiveness.
• Translate threat intel into engineering roadmaps.
• Review designs for security architecture and enable cross-team integration.
• Lead security incident response and threat mitigation efforts.
• Use metrics to ensure controls meet objectives and drive continual improvement.
• Foster a security engineering culture focused on ownership and outcomes.

Skills

Information Technology experience

Information security experience

Scripting (PowerShell/Python/JS)

Security tooling

SIEM deployments

Networking fundamentals

Security controls

Azure

Security program improvements

CI/CD security

Threat detection framework

Secure SDLC

Education

Bachelor/Master degree

Job description

Creative Artists Agency (CAA) is seeking an accomplished security leader in London to drive end-to-end security services across enterprise systems. You will shape threat detection, risk mitigation and response, and align tooling with policy, compliance, and business needs in a fast-paced environment.

The role requires deep experience in information security, Azure, SIEM, and secure development practices, with a drive for measurable, demonstrable improvements in security controls and incident