Senior Detection & Response Security Engineer – Remote + Equity

Academic Key; United Kingdom; Remote; GBP 85,000 - 115,000; Full time

Benefits offered by this job

Remote work

Flexible holiday 25 days

Co-working space access

Workations & Company Retreat

Home office setup stipend

Job summary

Primer.io is seeking a Security Engineer III to own detection and response across its cloud infrastructure and SaaS estate. You will write and tune detections in Elastic, build automation with Python or Terraform, and lead incident response from triage to resolution.

You will collaborate with Application Security and Product Security engineers to continuously improve threat detection and response capabilities.

Qualifications

• Real experience responding to security incidents, from first alert through to write-up.
• Hands-on experience writing and tuning detections in a SIEM (Elastic, Splunk or similar).
• Experience with MITRE ATT&CK to reason about coverage.
• Experience with cloud-native detection and response in AWS or Google Cloud.

Responsibilities

• Build, tune and maintain detections in SIEM and onboard new log sources.
• Own investigation from triage to resolution and write up findings clearly.
• Lead routine incidents end to end and drive investigations.
• Build runbooks and automations to reduce manual triage and response.
• Join on-call rotation for incident response and monitoring.

Skills

Incident response

Detections tuning

MITRE ATT&CK

Python

Go

Tools

Elastic SIEM

Splunk

Terraform

Tines

Job description

Primer.io is seeking a Security Engineer III to own detection and response across its cloud infrastructure and SaaS estate. You will write and tune detections in Elastic, build automation with Python or Terraform, and lead incident response from triage to resolution.

You will collaborate with Application Security and Product Security engineers to continuously improve threat detection and response capabilities.