Senior Detection & Response Engineer - Cloud & SIEM

Primer.io; United Kingdom; On-site; GBP 70,000 - 110,000; Full time

Job summary

Primer.io is seeking a Security Engineer to join the Detection & Response function. You will own the detections in our SIEM, tune tooling, and build automation to speed up how we detect, investigate and respond to threats across our cloud infrastructure and SaaS estate.

You will collaborate with Application and Product Security engineers, shaping detection rules, playbooks, and responses. Expect on-call rotation, risk decisions, and involvement in audits as part of a fast-paced security team.

Qualifications

• Experience in incident response from alert through to write-up.
• Hands-on SIEM experience (Elastic, Splunk) using MITRE ATT&CK to reason about coverage.
• Experience with cloud-native detection and response in AWS or Google Cloud.

Responsibilities

• Build, tune and maintain detections in SIEM and onboard new log sources (AWS, Google Workspace, Kubernetes).
• Write runbooks and automation (Python, Terraform) to speed up triage and response.
• Take ownership of investigations and lead on-call incident response.

Skills

Incident response

SIEM tuning

Python

Terraform

AWS

Google Cloud

MITRE ATT&CK

Tools

Elastic

Splunk

Terraform

Kubernetes

Job description

Primer.io is seeking a Security Engineer to join the Detection & Response function. You will own the detections in our SIEM, tune tooling, and build automation to speed up how we detect, investigate and respond to threats across our cloud infrastructure and SaaS estate.

You will collaborate with Application and Product Security engineers, shaping detection rules, playbooks, and responses. Expect on-call rotation, risk decisions, and involvement in audits as part of a fast-paced security team.