Senior Security Engineer: Threat Detection & IR

Anaplan; Greater London; On-site; GBP 80,000 - 120,000; Full time

Job summary

Anaplan is seeking a Security Engineer to join the Security Operations team. You will design and enhance capabilities to detect, investigate, and respond to threats, working at the intersection of engineering and operations to build scalable, automated security solutions.

You will lead alert triage, incident response, and DFIR, and contribute to SIEM engineering, high‑fidelity data pipelines, and automated detections. Strong scripting and collaboration skills are essential.

Qualifications

• Technical Security Experience in security operations.
• IR & DFIR experience with evidence preservation and post-incident reviews.
• Detection & response: tuning SIEM detections and threat hunting queries.
• SecOps tooling: experience with SIEM, EDR/XDR, vulnerability scanners, ticketing systems.
• Threat intel & hunting: integrate intel into tooling and detection logic.
• Scripting abilities (Python/Go/Bash) for tooling and automation.
• App security knowledge including OWASP top risks.
• Frameworks & standards knowledge (NIST CSF, CIS, MITRE ATT&CK)
• Strong communication to explain risks to technical and non-technical audiences.

Responsibilities

• Investigate and triage security alerts from detection tooling.
• Assist incident response and digital forensics across endpoints, cloud, and identities.
• Contribute to SIEM engineering: onboarding, parsers, data pipelines, and performance.
• Develop detections using Detection as Code and map to MITRE ATT&CK.
• Explore AI-augmented security operations and tooling integration.
• Incorporate threat intelligence into detections and response playbooks.
• Conduct proactive threat hunting and share findings to improve tooling.

Skills

Security Operations

Incident Response

SIEM & EDR

Threat Hunting

Threat Intelligence

Scripting

Application Security

Security Frameworks

Communication

Tools

SIEM platforms

EDR/XDR

Vulnerability scanners

Ticketing systems

Job description

Anaplan is seeking a Security Engineer to join the Security Operations team. You will design and enhance capabilities to detect, investigate, and respond to threats, working at the intersection of engineering and operations to build scalable, automated security solutions.

You will lead alert triage, incident response, and DFIR, and contribute to SIEM engineering, high‑fidelity data pipelines, and automated detections. Strong scripting and collaboration skills are essential.