Detection Engineer

Overview

Security Detection & Response Engineer responsible for detection and incident response capabilities for security operations.

What you'll do

• Triaging security alerts and conducting security investigations.
• Lead and execute incident response efforts.
• Develop, tune, and maintain security detection rules and alerting.
• Build and maintain detection automation to reduce manual security work.
• Perform data onboarding, parsing, rule creation, and dashboarding in SIEM infrastructure.
• Implement security monitoring across endpoint and SaaS platforms.

What you'll need

• Proven experience in incident response and security operations.
• Experience in detection engineering for rules and alerts.
• Hands-on experience with Google SecOps (Chronicle) SIEM infrastructure.
• Proficiency in security monitoring including JAMF MDM, Google Workspace, Okta, and SaaS applications.
• Experience in cloud security monitoring, particularly Google Cloud and GCP Security Command Center (SCC).
• Solid scripting skills for automation (Python, Bash).

Details

• In-country role with strong preference for London.