Security engineer in threat detection

InfoSec People; United States; Remote; USD 171,000 - 224,000; Full time

Benefits offered by this job

Remote-first environment

Exposure to AI-driven security ops

Job summary

InfoSec People Ltd is seeking a Senior Security Engineer to join its Security Operations team. You will engineer detections, improve telemetry, and automate investigations in a modern cloud-first environment.

The role emphasizes hands-on threat hunting, incident response, and close collaboration with stakeholders across security tooling and cloud platforms. Remote-first, six-month engagement, daily rate discussions apply.

Qualifications

• 6+ years in Security Engineering, Security Operations or Incident Response.
• Strong SIEM/XDR expertise and Microsoft 365 security experience.
• Proficient in KQL, SPL or CrowdStrike LogScale query writing; scripting in Python/PowerShell.

Responsibilities

• Design and build threat detections across SIEM and XDR platforms.
• Conduct proactive threat hunting across cloud, endpoint and identity.
• Build automation to accelerate security investigations and response.
• Support security incidents from investigation to remediation.
• Enhance AI-driven security monitoring and reduce noise.

Skills

SIEM/XDR expertise

Microsoft 365 security

KQL/SPL/CrowdStrike LogScale

Python/PowerShell scripting

Threat hunting

MITRE ATT&CK framework

EDR on Windows/macOS

Security automation

Incident response

Tools

CrowdStrike LogScale

Job description

Описание

We're partnering with a leading global technology investor operating across a portfolio of high-growth software businesses. They are looking for an experienced Senior Security Engineer to join their Security Operations function and play a key role in strengthening detection, monitoring, automation and threat hunting capabilities. This is a highly technical, hands-on position suited to someone who enjoys building security capability rather than simply operating existing tooling. You'll be responsible for engineering new security solutions, improving detection effectiveness, enhancing automation and supporting incident response activities across a modern cloud-first environment.

Задачи

• Design and build threat detections across SIEM and XDR platforms
• Develop and optimise KQL, SPL or equivalent detection logic
• Conduct proactive threat hunting across cloud, endpoint and identity environments
• Improve telemetry coverage and visibility across security tooling
• Build automation to accelerate security investigations and response
• Support security incidents from investigation through to remediation
• Improve AI security monitoring and detection capability
• Enhance alert quality and reduce operational noise
• Collaborate with technical and business stakeholders on security initiatives

Требования

• 6+ years within Security Engineering, Security Operations or Incident Response
• Strong SIEM/XDR expertise
• Microsoft 365 security experience
• KQL, SPL or CrowdStrike LogScale query writing
• Python and/or PowerShell scripting
• Threat hunting experience
• MITRE ATT&CK understanding
• EDR experience across Windows and macOS
• Security automation experience
• Strong incident response capability

Условия

• Up to £800 per day
• Inside IR35
• Initial six-month engagement
• Remote-first environment
• Modern security stack
• Significant detection engineering ownership
• Exposure to AI-driven security operations