3 дня назад
Security Operations Engineer (Detection Engineering)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security Operations Engineer (Detection Engineering): Building scalable detection, SOAR automation, threat hunting, and incident response capabilities across cloud, endpoint, SaaS, and application environments with an accent on high-fidelity detections, security telemetry, and automated workflows. Focus on designing MITRE ATT&CK-aligned detection coverage, integrating SIEM and security platforms, and improving incident response through code, APIs, and engineering collaboration.
Location: UK / Hybrid; London, GBR
Company
provides software delivery governance and control-plane capabilities that help enterprises build, run, and govern software factories.
What you will do
- Design, deploy, tune, and measure detection rules across cloud, endpoint, SaaS, and application environments.
- Build SOAR playbooks and automate alert triage, enrichment, containment, and response using APIs, scripting, and orchestration platforms.
- Investigate security events, support incident response, conduct proactive threat hunting, and participate in weekend on-call support.
- Partner with Product and Platform Engineering to improve security telemetry, logging, and security observability requirements.
- Operationalize vulnerability findings and threat intelligence into detection logic and hunting hypotheses.
- Participate in red team and purple team exercises and use findings to improve the detection stack.
Requirements
- 3+ years of experience in Security Operations, Detection Engineering, or Security Engineering.
- Hands-on experience with enterprise SIEM platforms such as Splunk, Microsoft Sentinel, Elastic, Chronicle, or QRadar.
- Experience building and tuning detection rules, developing SOAR playbooks, and automating security workflows.
- Strong scripting skills with Python, PowerShell, or similar languages, plus experience with Git, APIs, and engineering workflows.
- Experience with cloud environments, preferably AWS, and a solid understanding of the MITRE ATT&CK framework.
- Experience supporting security incident response and communicating effectively with Security and Engineering teams.
Nice to have
- Experience with AI-assisted detection or security automation.
- Familiarity with Sigma, Atomic Red Team, or detection testing frameworks.
- Infrastructure as Code experience with Terraform, CloudFormation, or ARM.
- Kubernetes or container security experience.
- Experience in SaaS, DevOps, or software delivery organizations, or relevant security certifications.
Culture & Benefits
- Competitive benefits and vacation package.
- Growth opportunities within a fast-growing software company.
- Team outings and a casual, collaborative work environment.
- Focus on diversity and a global workforce.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
Vercel
6 дней назад
Security Software Engineer, Detection & Response
208 000 - 312 000$
CrowdStrike
6 дней назад
Associate Platform Professional Services Consultant (Falcon Next-Gen SIEM)
3 дня назад
Microsoft Azure Cybersecurity Advisor
Perplexity
6 дней назад
Software Engineer (Security)
220 000 - 405 000$
7 дней назад
Cybersecurity Threat Researcher
9 дней назад