Назад
Company hidden
3 дня назад

Security Operations Engineer (Detection Engineering)

Формат работы
hybrid
Тип работы
fulltime
Грейд
middle/senior
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Security Operations Engineer (Detection Engineering): Building scalable detection, SOAR automation, threat hunting, and incident response capabilities across cloud, endpoint, SaaS, and application environments with an accent on high-fidelity detections, security telemetry, and automated workflows. Focus on designing MITRE ATT&CK-aligned detection coverage, integrating SIEM and security platforms, and improving incident response through code, APIs, and engineering collaboration.

Location: UK / Hybrid; London, GBR

Company

hirify.global provides software delivery governance and control-plane capabilities that help enterprises build, run, and govern software factories.

What you will do

  • Design, deploy, tune, and measure detection rules across cloud, endpoint, SaaS, and application environments.
  • Build SOAR playbooks and automate alert triage, enrichment, containment, and response using APIs, scripting, and orchestration platforms.
  • Investigate security events, support incident response, conduct proactive threat hunting, and participate in weekend on-call support.
  • Partner with Product and Platform Engineering to improve security telemetry, logging, and security observability requirements.
  • Operationalize vulnerability findings and threat intelligence into detection logic and hunting hypotheses.
  • Participate in red team and purple team exercises and use findings to improve the detection stack.

Requirements

  • 3+ years of experience in Security Operations, Detection Engineering, or Security Engineering.
  • Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle, or QRadar.
  • Experience building and tuning detection rules, developing SOAR playbooks, and automating security workflows.
  • Strong scripting skills with Python, PowerShell, or similar languages, plus experience with Git, APIs, and engineering workflows.
  • Experience with cloud environments, preferably AWS, and a solid understanding of the MITRE ATT&CK framework.
  • Experience supporting security incident response and communicating effectively with Security and Engineering teams.

Nice to have

  • Experience with AI-assisted detection or security automation.
  • Familiarity with Sigma, Atomic Red Team, or detection testing frameworks.
  • Infrastructure as Code experience with Terraform, CloudFormation, or ARM.
  • Kubernetes or container security experience.
  • Experience in SaaS, DevOps, or software delivery organizations, or relevant security certifications.

Culture & Benefits

  • Competitive benefits and vacation package.
  • Growth opportunities within a fast-growing software company.
  • Team outings and a casual, collaborative work environment.
  • Focus on diversity and a global workforce.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →