Security Software Engineer II, Detection and Response

About the role

A security engineer builds and improves detection and response capabilities, adapting to new threats that could affect staff and infrastructure. The work directly strengthens the organisation's overall security posture.

What you will do

• Create alerts and automated workflows that improve detection of and response to internal and external threats
• Run logging pipelines and infrastructure, adding new sources to widen detection coverage
• Develop and maintain internal tools that automate and extend detection and response
• Handle alerts from team tooling and lead incidents during an on-call rotation
• Hunt for threats in the environment that have not yet been detected
• Use AI to make security engineering faster, more accurate and broader in coverage

What they look for

• Understanding of the attacker lifecycle and of common attack and detection methods
• Experience using threat intelligence to strengthen detection capabilities
• Familiarity with drawing on several telemetry sources for investigations, such as EDR, Osquery or firewall logs