Senior Security Engineer - UK

• Up to £85,000 Depending on Experience
• Hybrid, 2 days onsite per week
• Bristol, London, Manchester or Swansea
• Hands-on detection engineering across Splunk, YARA, EDR and cloud security

ABOUT THE CLIENT

Our client is a leading technology organisation delivering secure and resilient digital services into complex UK public sector environments.

Their Cyber practice works on large-scale, security-critical programmes, helping organisations embed security directly into modern technology platforms and delivery pipelines. They are now looking for an experienced Senior Security Engineer, Monitoring and Detection to join the team. Job Description

THE BENEFITS

• Hybrid working, 2 days onsite per week (remote first project)
• Choice of Bristol, London, Manchester or Swansea
• Opportunity to work on complex public sector security programmes
• Strong technical environment with scope to mentor other engineers
• Exposure to modern cloud, detection and security data technologies

THE SENIOR SECURITY ENGINEER ROLE

You will take ownership of monitoring and detection capabilities across complex environments, building and tuning detection logic while improving the pipelines that feed security operations.

Responsibilities will include:

• Building and tuning detection rules across Splunk SPL, YARA and EDR platforms
• Mapping detection coverage against MITRE ATT&CK
• Reducing false positives and improving detection quality
• Testing detection rules through replay, load testing and red-team scenarios
• Working closely with SOC analysts to improve operational detection capability
• Managing log ingestion, routing, filtering, normalisation and enrichment using Cribl
• Supporting cloud security data across technologies such as Kinesis, S3 and Amazon Security Lake Job Description Job Description

SENIOR SECURITY ENGINEER ESSENTIAL SKILLS

• Hands-on cloud security experience across AWS, Azure or GCP
• Strong experience with either Splunk SPL, YARA and EDR detection engineering, or security data pipelines including Cribl, Kinesis, S3 and Amazon Security Lake
• Understanding of Zero Trust, identity-first security, secrets management and network segmentation
• Ability to communicate technical security risk to non-technical stakeholders
• Experience working with, or alongside, UK Government or public sector organisations Job Description

TO BE CONSIDERED

Please either apply through this advert or email me directly via