Senior Security Engineer

Security; Greater London; On-site; GBP 92,000 - 101,000; Full time

Job summary

La Fosse is seeking a Senior Security Engineer for a contract role in London. The successful candidate will enhance threat detection, SIEM capabilities and incident response in a cloud-native environment, with a strong focus on automation and AI-driven SecOps.

Experience with CrowdStrike and Wiz is desirable, and the role includes day-rate work in a Central London office. The position requires hands-on security operations, incident response across SIEM/EDR/cloud security platforms, and

Responsibilities

• Build, develop and continuously improve SIEM detection capabilities, creating and refining complex detection rules, alerts and dashboards to identify threats across end user and production environments, using the MITRE ATT&CK framework.

Job description

Senior Security Engineer

A Fintech requires a Contract Senior Security Engineer who will be responsible for enhancing threat detection, SIEM capabilities and incident response across a complex, cloud native environment. The role has a strong focus on automation and AI-driven SecOps, using tools such as CrowdStrike and Wiz to improve security monitoring, detection and response capabilities.

• Day Rate: £500-£550pd
• IR35 Status: Outside
• Travel: 5 days a week in Central London Office
• Duration: Initial 6 months

Key Responsibilities:

• Build, develop and continuously improve SIEM detection capabilities, creating and refining complex detection rules, alerts and dashboards to identify threats across end user and production environments, using the MITRE ATT&CK framework.
• Investigate and respond to security incidents, working across SIEM, EDR and cloud security platforms to manage the full incident lifecycle, from alert triage and investigation through to containment, remediation and lessons learned.
• Strengthen endpoint security and threat prevention, with hands on experience of CrowdStrike EDR and Data Loss Prevention technologies, including the development and optimisation of detection and prevention capabilities.
• Use Wiz to support cloud vulnerability management and incident response, alongside a strong understanding of cloud-native security, multi-cloud environments, CI/CD pipelines and DevSecOps practices.
• Introduce and develop automation across Security Operations, using scripting and frontier LLM/AI models to enhance threat detection, improve investigation processes and streamline operational workflows.
• Take ownership of day to day security operations and continuous improvement, developing playbooks and procedures while working closely with engineering and wider business teams. Experience with regulatory frameworks such as PCI DSS, DORA, SOC 2 or GDPR would be a bonus.