Senior Security Engineer - AI-Driven Threat Detection

Anaplan; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Anaplan is seeking a Security Engineer to join the Security Operations team in London. You will design, build, and improve capabilities for detecting, investigating, and responding to threats.

You’ll work at the intersection of engineering and operations to create scalable, automated security solutions. You will triage alerts, support incident investigations, contribute to SIEM engineering, and develop detections using a Detection as Code approach.

Qualifications

• Technical security experience in securing cloud-native environments and modern application stacks.
• Hands-on experience supporting security incident investigations, including evidence preservation, log and artifact analysis, timeline reconstruction, and root-cause identification.
• Practical experience developing and tuning SIEM detections, writing threat hunting queries, and participating in incident response activities.
• Hands-on knowledge of administering and operating core security operations tools, including SIEM platforms, EDR/XDR solutions, vulnerability scanners, and ticketing/case management systems.
• Experience with threat intelligence platforms and feeds, integrating intelligence into security tooling and detection logic.
• Proficiency in one or more scripting languages (e.g., Python, Go, Bash) to build tooling and automate workflows.
• Familiarity with secure development practices, OWASP top risks, and code reviews with developers.
• Working knowledge of security frameworks (e.g., NIST CSF, CIS Benchmarks, MITRE ATT&CK) and standards like SOC 2 or ISO 27001.
• Strong ability to communicate security risks and recommendations to technical and non-technical stakeholders.

Responsibilities

• Investigate and triage security alerts from across detection tooling, analyzing logs, endpoints, identity, cloud, and network telemetry.
• Support investigations and response to confirmed security incidents, applying DFIR skills across data sources.
• Contribute to engineering and maintenance of SIEM parsers, data pipelines, and platform performance.
• Develop and maintain a library of high-quality detections using Detection as Code and MITRE ATT&CK mappings.
• Explore and apply AI and machine learning to enhance detection, alert triage, and response workflows.
• Integrate threat intelligence into detection logic, playbooks, and hunting activities.
• Participate in proactive threat hunting to identify attacker activity and inform detection improvements.

Skills

Technical security experience

Incident response

Detection & response

SecOps tooling

Threat intelligence & hunting

Scripting & automation

Application security

Security frameworks & standards

Communication & collaboration

Job description

Anaplan is seeking a Security Engineer to join the Security Operations team in London. You will design, build, and improve capabilities for detecting, investigating, and responding to threats.

You’ll work at the intersection of engineering and operations to create scalable, automated security solutions. You will triage alerts, support incident investigations, contribute to SIEM engineering, and develop detections using a Detection as Code approach.