Senior Detection Engineer

InfoSec People Ltd; West of England; Hybrid; GBP 51,000 - 85,000; Full time

Benefits offered by this job

Annual bonus

Pension contribution

Private healthcare

Life assurance

Staff discount

Flexible hybrid working

Excellent training and certification

Career progression

Job summary

InfoSec People Ltd in the United Kingdom is hiring a Senior EDR Engineer to join a growing security function. You will own enterprise EDR/XDR deployments across a complex environment and work with Cyber Defence, Incident Response, Threat Intelligence and Security Architecture teams.

This role focuses on engineering, tuning and threat hunting of Defender XDR, CrowdStrike Falcon and SentinelOne, building detections with KQL, and maturing incident response capabilities.

Qualifications

• Experience engineering enterprise EDR/XDR platforms.
• Hands-on threat hunting experience.
• Strong knowledge of Defender XDR and related cyber defence tooling.
• Proficiency with KQL and threat detection development.
• Experience supporting incident response investigations.
• Familiarity with MITRE ATT&CK framework.

Responsibilities

• Engineering and optimising Microsoft Defender XDR, CrowdStrike Falcon and SentinelOne
• Developing advanced threat detections and hunting capabilities
• Building and tuning KQL queries within Defender XDR and Microsoft Sentinel
• Supporting cyber incident investigations and response activities
• Improving detection coverage using threat intelligence and attack simulation outcomes
• Defining EDR policies, standards and best practices
• Supporting platform integrations across the wider security technology estate
• Acting as the technical SME for endpoint security technologies

Skills

EDR/XDR experience

Microsoft Defender XDR

Threat hunting

KQL

Incident response

MITRE ATT&CK knowledge

Tools

CrowdStrike Falcon

SentinelOne

Defender XDR

Job description

Senior EDR Engineer

Upto £85,000 + Bonus + Excellent Benefits

Hybrid Working

We're working with a major UK retail organisation investing heavily in its Cyber Defence capabilities and seeking an experienced Senior EDR Engineer to join a growing security engineering function.

This is a fantastic opportunity for an endpoint security specialist to take ownership of enterprise-scale EDR and XDR technologies across a complex global environment.

You'll be responsible for engineering, managing and improving endpoint security platforms whilst working closely with Cyber Defence, Incident Response, Threat Intelligence and Security Architecture teams.

What You'll Be Doing

• Engineering and optimising Microsoft Defender XDR, CrowdStrike Falcon and SentinelOne
• Developing advanced threat detections and hunting capabilities
• Building and tuning KQL queries within Defender XDR and Microsoft Sentinel
• Supporting cyber incident investigations and response activities
• Improving detection coverage using threat intelligence and attack simulation outcomes
• Defining EDR policies, standards and best practices
• Supporting platform integrations across the wider security technology estate
• Acting as the technical SME for endpoint security technologies

What We're Looking For

• Experience engineering enterprise EDR or XDR platforms
• Strong Microsoft Defender XDR expertise
• Knowledge of CrowdStrike Falcon and/or SentinelOne
• Hands-on threat hunting experience
• Strong KQL skills
• Experience supporting cybersecurity incident response investigations
• Knowledge of MITRE ATT&CK
• Experience within Security Engineering, Detection Engineering or Cyber Defence environments

Desirable Experience

• Microsoft Sentinel
• Large enterprise environments
• Security platform integrations
• Cloud security exposurewait
• Security certifications including Microsoft, GIAC, ISC2, CrowdStrike or SentinelOne

Benefits

• Annual bonus
• Pension contribution
• Private healthcare
• Life assurance
• Staff discount
• Flexible hybrid working
• Excellent training and certification support
• Career progression within a growing Cyber Defence function