Senior MXDR Security Engineer - SIEM, MITRE ATT&CK

Harvey Nash Group; London; On-site; GBP 70,000 - 90,000; Full time

Job summary

A leading investment bank in London is seeking a Senior MXDR Security Engineer to enhance cybersecurity monitoring. The role involves developing use cases, refining rules, and working with internal teams to ensure effective security. Candidates must have hands-on MXDR/SIEM experience and a solid understanding of MITRE ATT&CK. This position is inside IR35, requiring 3 days on-site work.

Qualifications

• Hands-on MXDR/SIEM experience required.
• Strong telemetry parsing/enrichment skills are necessary.
• Solid grasp of MITRE ATT&CK & threat-detection best practices expected.

Responsibilities

• Develop use cases and rulesets across multiple log sources.
• Perform regular rule refinement sessions.
• Identify onboarding/offboarding projects for effective security monitoring.

Skills

MXDR/SIEM experience

Telemetry parsing/enrichment skills

MITRE ATT&CK knowledge

Clear communication

Customer-focused mindset

Passion for continuous improvement

Tools

Sentinel

Splunk

QRadar

Job description

Senior MXDR Security Engineer sought by leading investment bank based in the city of London.

**Inside IR35 - 3 days a week on site**

What You'll Do:

• Development of use cases and rulesets across multiple log sources.
• Performing regular rule refinement sessions to address rule logic issues and false positives.
• Output activities from refinement sessions such as development and/or refinement of rules and workbooks.
• Optimisation activities such as log utilisation tracking and refinement.
• MITRE ATT&CK heat map coverage.
• Working with internal ITC teams and the Customer to identify any onboarding or offboarding projects of appropriate log sources necessary for effective security monitoring.
• Identification of opportunities for additional monitoring.
• Workbook creation for data visualisation.
• Attendance at Service Review Meetings.
• Maintenance of Service Documentation such as LLD (co-management activity).

Skills required:

• Hands-on MXDR/SIEM experience (e.g., Sentinel, Splunk, QRadar)
• Strong telemetry parsing/enrichment skills
• Solid grasp of MITRE ATT&CK & threat-detection best practices
• Clear communicator with a customer-focused mindset
• Passion for continuous improvement in cyber defence

Please apply within for further details.

Alex Reeder
Harvey Nash Finance & Banking