Senior Security Operations Engineer: Detection & Response

ApplyMint; United Kingdom; On-site; GBP 70,000 - 110,000; Full time

Job summary

Fortis Games is seeking a Senior Security Operations Engineer, Detection and Response to build and mature our security operations capability. This senior hands-on role focuses on turning attacker behavior, telemetry, and risk into reliable detections, response workflows, and measurable improvements.

You will own and improve detection, investigation, and response across corporate, cloud, identity, endpoint, and game-dev environments.

Qualifications

• 6+ years in security operations, detection engineering, or incident response.
• Experience writing and tuning detections in SIEM/EDR and cloud environments.
• Hands-on with SIEM platforms and EDR tools such as CrowdStrike Falcon.
• Practical AWS security knowledge (IAM, CloudTrail, GuardDuty, VPC logs).
• Ability to script or automate security workflows (Python/PowerShell/SQL).
• Familiar with audit evidence, control docs, and third-party reviews.

Responsibilities

• Design, implement, test, and tune detections across multiple telemetry sources.
• Build detection-as-code practices with version control and reviews.
• Improve SIEM and telemetry pipelines, including log ingest and correlation.
• Operate deception capabilities like canary tokens and honey assets.
• Lead and support incident response investigations and post-incident findings.
• Collaborate with IT, infra, engineering, and game teams to boost visibility.
• Assist with GRC activities and policy/SOP documentation (about 20%).

Skills

Security operations

Detection engineering

Incident response

SIEM

EDR

AWS security

Automation scripting

Gaming industry experience

Threat hunting

Security frameworks

Tools

CrowdStrike Falcon

Job description

Fortis Games is seeking a Senior Security Operations Engineer, Detection and Response to build and mature our security operations capability. This senior hands-on role focuses on turning attacker behavior, telemetry, and risk into reliable detections, response workflows, and measurable improvements.

You will own and improve detection, investigation, and response across corporate, cloud, identity, endpoint, and game-dev environments.