Cyber Security Engineer

Cyber Security Engineer / Leeds or London / £45,000 - £65,000

Shape the Future of Enterprise Cyber Defence

This is an opportunity to step into one of the most influential technical security roles within a large-scale organisation undertaking a significant investment in its cyber security capability.

Rather than simply responding to incidents, you'll become the internal technical authority for Security Operations tooling, Detection Engineering and security platform optimisation, helping define how the organisation detects, investigates and responds to cyber threats.

You'll take ownership of industry-leading technologies including Google SecOps, CrowdStrike and Darktrace, while driving improvements across automation, AI-assisted investigations and next-generation Security Operations.

If you're looking for a role where you can genuinely influence cyber strategy, improve enterprise resilience and help shape the future operating model of Security Operations, this is an outstanding opportunity.

The Role

Working within a collaborative Security Operations function, you'll sit at the centre of Security Operations, Detection Engineering and Security Platform Engineering.

You'll become the internal Subject Matter Expert for security tooling, ensuring the organisation's detection capabilities continue to evolve while acting as the technical bridge between Security Operations, Security Engineering, Architecture and an outsourced Security Operations partner.

This is far more than a traditional SOC position. Around 70% of your focus will be dedicated to Detection Engineering and platform ownership, with the remaining time spent supporting operational improvements, incident assurance and strengthening the overall security capability.

What You'll Be Doing

Own and administer Google SecOps, CrowdStrike and Darktrace
Design, create and optimise detection rules to improve alert quality and reduce false positives
Increase detection coverage through MITRE ATT&CK mapping and continuous engineering improvements
Review platform health, telemetry and security tooling integrations
Assess investigations completed by the outsourced security provider, providing technical assurance and challenging service quality where required
Identify detection gaps through incident reviews and trend analysis
Drive improvements across Detection Engineering, telemetry, SIEM and Security Operations processes
Develop automation opportunities and support AI-assisted investigations and remediation
Collaborate with Security Engineering, Architecture and Cyber Defence teams to continuously enhance the organisation's security postureEssential Experience

Google SecOps
CrowdStrike
Darktrace
Detection Engineering, including rule creation, tuning and optimisation
Enterprise Security Operations and incident investigation
SIEM administration and security platform management
Improving detection coverage within complex enterprise environmentsDesirable Experience

Exposure to any of the following would be advantageous:

Security automation and SOAR
AI-driven Security Operations or Agentic AI
Threat Intelligence integration
Telemetry EngineeringAbout You

You'll likely be an experienced Detection Engineer, Security Platform Engineer or Security Operations Engineer who enjoys working across both engineering and operational security rather than specialising in one area alone.

You'll be naturally curious, enjoy solving complex security problems and be motivated by continuously improving detection capability through automation and modern engineering practices.

You'll also be comfortable engaging with a variety of technical stakeholders, influencing security decisions and becoming the recognised internal expert for Security Operations tooling.

Why Apply?

This is a genuinely unique opportunity to influence the future direction of an enterprise Security Operations capability.

You'll have the chance to:

Become the internal owner of Google SecOps, CrowdStrike and Darktrace
Help shape the organisation's long-term Security Operations strategy
Drive AI-enabled investigations, automation and next-generation detection capabilities
Improve cyber resilience across an enterprise environment processing millions of security events each month
Work across Detection Engineering, SIEM, platform administration, MSSP governance and security automation
Join a collaborative, technically mature cyber security team investing heavily in innovation
Enjoy remote-first working with standard office hours, no shift work and no on-call commitmentsIf you're looking for a position where your technical expertise will have a lasting impact on a large-scale cyber security programme, we'd love to hear from you. Please apply with a copy of your CV by 28th July to Dominic Brown on

Cyber Security Engineer / Leeds or London / £45,000 - £65,000