Senior Security Engineer - Cloud Detection (Remote)

Primer; United Kingdom; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Competitive share options

Uncapped holiday (25 days)

Co-working space access across major城市

Workations & Company Retreat

Home office setup stipend (£500)

Generous learning budget

Private Medical Insurance

A broad set of additional perks (var.*

Job summary

Primer is seeking a Security Engineer to detect, investigate, and respond to threats across our cloud infrastructure. You will own a meaningful slice of detection and response, tuning what our SIEM catches, and building automation to speed response, while acting as a first responder when issues arise.

You’ll work on end-to-end detections, investigate incidents, and contribute runbooks and automation to reduce manual work. This role supports our compliance program and involves on-call duties.

Qualifications

• Hands-on experience building and tuning detections in a SIEM (Elastic preferred).
• Experience with AWS and cloud-native detection and response.
• Comfortable with Python for scripting and automation.
• Experience with Terraform or other infrastructure-as-code.
• Working knowledge of MITRE ATT&CK.
• Real experience triaging, investigating and resolving security incidents.
• Clear, structured written communication.

Responsibilities

• Plan and deliver end-to-end detection and response work within your ownership area.
• Build, tune and maintain detections across SIEM and AWS environments.
• Own an investigation queue: triage, investigate, elevate, and resolve incidents.
• Build runbooks and automations (Python and no-code tools) to reduce manual steps.
• Make and document risk decisions and escalate when needed.
• Support compliance by keeping controls audit-ready and providing evidence.
• Use Terraform and Python to build and maintain infrastructure behind detections.
• Join our on-call rotation for incident response and monitoring.

Skills

SIEM detections

AWS

Python scripting

Terraform

MITRE ATT&CK

Incident triage

Written communication

Tools

Elastic SIEM

AWS

Zapier

Tines

Terraform

Python

Job description

Primer is seeking a Security Engineer to detect, investigate, and respond to threats across our cloud infrastructure. You will own a meaningful slice of detection and response, tuning what our SIEM catches, and building automation to speed response, while acting as a first responder when issues arise.

You’ll work on end-to-end detections, investigate incidents, and contribute runbooks and automation to reduce manual work. This role supports our compliance program and involves on-call duties.