Cyber Defence Engineer

Intact Insurance (previously RSA); United States; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Annual discretionary bonus

Hybrid working

25 days annual leave + bank holidays +

Health & wellbeing + virtual GP

Career development and mentoring

Inclusive culture + employee networks

Share investment options

Pension contributions 11%

Job summary

Intact Insurance is seeking a Cyber Defence Engineer to strengthen our cyber security capabilities across cloud and on‑prem environments. You will engineer, configure and optimize security tooling, improve threat detection, and ensure telemetry and visibility align with current threat activity.

You’ll work with SIEMs (Sentinel/Defender), apply KQL for detection, and contribute to detection‑as‑code. Hybrid working, annual bonus and strong pension benefits are offered to help you thrive in a

Qualifications

• Strong experience with SIEM platforms, analytics and alerting.
• Proficiency in Kusto Query Language (KQL).
• Experience with Azure cloud and related security services.
• Understanding of logging, telemetry, monitoring and analytics.
• Hands-on with threat detection tooling and endpoint security.
• Experience with vulnerability scanners and SAST/DAST tools.

Responsibilities

• Develop and maintain threat detection logic across SIEM, endpoints and cloud.
• Ensure logging pipelines are engineered, complete and validated.
• Enhance visibility and analytics to align with threat activity.
• Support detection-as-code and automate testing/deployment.

Skills

SIEM

KQL

Azure security

Logging & telemetry

Threat detection tooling

Vulnerability scanners

Tools

Azure Sentinel

Microsoft Defender for Cloud

Job description

Intact Insurance is the new name for RSA in the UK, Ireland, and across Europe. It’s a new name and a new way to do business. Backed by global expertise and a commitment to service that feels different, we’re focused on making insurance simpler, faster, and more responsive.

Shape the future:

We’re leading a transformation in insurance helping people, businesses and society prosper in good times and be resilient in bad times. When you join us, you’re not just taking a job, you’re stepping into a career where you can make a real difference.

Grow with us:

We’re customer-driven, community-focused, and committed to helping our people grow. Whether you’re early in your journey or bringing years of experience, we’ll support you with the tools, flexibility, and opportunities to thrive.

Win as a Team:

The Cyber Defence Engineer will play a central role in strengthening the Cyber defence capabilities of Intact by engineering, configuring and optimising the security tooling used across both cloud and on premises environments. A key focus of this role is the development and ongoing improvement of threat detection capabilities, ensuring that visibility, telemetry, analytics and alerting are well engineered and aligned to current threat activity.

You’ll make an impact by:

• Developing, maintaining and improving threat detection logic across SIEM, endpoint and cloud monitoring tools.
• Ensuring logging and telemetry pipelines are correctly engineered, complete and validated.
• Enhancing visibility and analytics to ensure alignment with current threat activity.
• Supporting the development of detection as code and automate rule testing and deployment.

Your skills and experience:

• Strong experience with SIEM platforms (ideally Sentinel / Defender) including the development of custom queries, analytics and alerting.
• Proficiency in Kusto Query Language (KQL) for detection engineering, analysis and threat hunting.
• Experience with cloud environments including Azure and related security services.
• Strong understanding of logging, telemetry, monitoring and analytics across cloud and on premises systems.
• Practical experience with threat detection tooling, endpoint security platforms and cloud native security tools.
• Engineering experience with exposure management platforms such as vulnerability scanners and static and dynamic application security testing tools.

Why You’ll Love It Here:

Being part of our team means you’ll have the support and freedom to bring your best self to work each day. As a permanent member, here’s what you can look forward to

• Annual discretionary bonus
• Up to 11% pension contributions
• Hybrid working
• 25 days annual leave + bank holidays + buy/sell options
• Health & wellbeing + virtual GP
• Career development and mentoring
• Inclusive culture + employee networks
• Share investment options

Our DEI Commitment:

We celebrate individuality and believe our differences make us stronger. We’re proud to foster a culture where everyone feels respected, valued, and empowered to thrive.

As an Equal Opportunity and Disability Confident Employer, we ensure fair consideration for all applicants and offer interviews to all disabled candidates who meet the essential criteria.

We understand that everyone’s circumstances are different and are happy to explore flexible working options such as reduced hours or job shares to support work–life balance.

If you meet the core criteria but not every requirement, we’d still love to hear from you. Let’s explore how this role could support your next career step. If you need adjustments during the recruitment process, just let us know we’re here to support you.