Cyber Security Engineer
Summary
Designs and tunes security detection rules, investigates incidents, and manages SIEM platforms for enterprise clients using tools like Google SecOps, CrowdStrike, and Darktrace.
Salary: £45,000 - 65,000 per year
Requirements:- Experience with Google SecOps
- Experience with CrowdStrike
- Experience with Darktrace
- Experience in Detection Engineering, including rule creation, tuning, and optimisation
- Experience in enterprise Security Operations and incident investigation
- Experience in SIEM administration and security platform management
- Experience improving detection coverage in complex enterprise environments
- Exposure to security automation and SOAR is advantageous
- Exposure to AI-driven Security Operations or Agentic AI is advantageous
- Exposure to Threat Intelligence integration is advantageous
- Exposure to Telemetry Engineering is advantageous
- Own and administer Google SecOps, CrowdStrike, and Darktrace
- Design, create, and optimise detection rules to improve alert quality and reduce false positives
- Increase detection coverage through MITRE ATT&CK mapping and continuous engineering improvements
- Review platform health, telemetry, and security tooling integrations
- Assess investigations completed by our outsourced security provider and provide technical assurance where required
- Identify detection gaps through incident reviews and trend analysis
- Drive improvements across Detection Engineering, telemetry, SIEM, and Security Operations processes
- Develop automation opportunities and support AI-assisted investigations and remediation
- Collaborate with Security Engineering, Architecture, and Cyber Defence teams to enhance our security posture
- AI
- Support
- Security
More:
We are a large-scale organisation investing significantly in our cyber security capability and shaping the future of enterprise cyber defence. This is a collaborative, technically mature Security Operations environment where you will sit at the centre of Security Operations, Detection Engineering, and Security Platform Engineering. We offer remote-first working, standard office hours, no shift work, and no on-call commitments, with the opportunity to make a lasting impact across an enterprise environment processing millions of security events each month. The role is based in Leeds or London and offers a salary of £45,000 to £65,000.
last updated 32 week of 2026