Job Description:

Cyber Security Engineer / Leeds or London / £45,000 - £65,000

Shape the Future of Enterprise Cyber Defence

This is an opportunity to step into one of the most influential technical security roles within a large-scale organisation undertaking a significant investment in its cyber security capability.

Rather than simply responding to incidents, you'll become the internal technical authority for Security Operations tooling, Detection Engineering and security platform optimisation, helping define how the organisation detects, investigates and responds to cyber threats.

You'll take ownership of industry-leading technologies including Google SecOps, CrowdStrike and Darktrace, while driving improvements across automation, AI-assisted investigations and next-generation Security Operations.

If you're looking for a role where you can genuinely influence cyber strategy, improve enterprise resilience and help shape the future operating model of Security Operations, this is an outstanding opportunity.

The Role

Working within a collaborative Security Operations function, you'll sit at the centre of Security Operations, Detection Engineering and Security Platform Engineering.

You'll become the internal Subject Matter Expert for security tooling, ensuring the organisation's detection capabilities continue to evolve while acting as the technical bridge between Security Operations, Security Engineering, Architecture and an outsourced Security Operations partner.

This is far more than a traditional SOC position. Around 70% of your focus will be dedicated to Detection Engineering and platform ownership, with the remaining time spent supporting operational improvements, incident assurance and strengthening the overall security capability.

What You'll Be Doing

• Own and administer Google SecOps, CrowdStrike and Darktrace
• Design, create and optimise detection rules to improve alert quality and reduce false positives
• Increase detection coverage through MITRE ATT&CK mapping and continuous engineering improvements
• Review platform health, telemetry and security tooling integrations
• Assess investigations completed by the outsourced security provider, providing technical assurance and challenging service quality where required
• Identify detection gaps through incident reviews and trend analysis
• Drive improvements across Detection Engineering, telemetry, SIEM and Security Operations processes
• Develop automation opportunities and support AI-assisted investigations and remediation
• Collaborate with Security Engineering, Architecture and Cyber Defence teams to continuously enhance the organisation's security posture

Essential Experience

• Google SecOps
• CrowdStrike
• Darktrace
• Detection Engineering, including rule creation, tuning and optimisation
• Enterprise Security Operations and incident investigation
• SIEM administration and security platform management
• Improving detection coverage within complex enterprise environments

Desirable Experience

Exposure to any of the following would be advantageous:

• Security automation and SOAR
• AI-driven Security Operations or Agentic AI
• Threat Intelligence integration
• Telemetry Engineering

About You

You'll likely be an experienced Detection Engineer, Security Platform Engineer or Security Operations Engineer who enjoys working across both engineering and operational security rather than specialising in one area alone.

You'll be naturally curious, enjoy solving complex security problems and be motivated by continuously improving detection capability through automation and modern engineering practices.

You'll also be comfortable engaging with a variety of technical stakeholders, influencing security decisions and becoming the recognised internal expert for Security Operations tooling.

Why Apply?

This is a genuinely unique opportunity to influence the future direction of an enterprise Security Operations capability.

You'll have the chance to:

• Become the internal owner of Google SecOps, CrowdStrike and Darktrace
• Help shape the organisation's long-term Security Operations strategy
• Drive AI-enabled investigations, automation and next-generation detection capabilities
• Improve cyber resilience across an enterprise environment processing millions of security events each month
• Work across Detection Engineering, SIEM, platform administration, MSSP governance and security automation
• Join a collaborative, technically mature cyber security team investing heavily in innovation
• Enjoy remote-first working with standard office hours, no shift work and no on-call commitments

If you're looking for a position where your technical expertise will have a lasting impact on a large-scale cyber security programme, we'd love to hear from you. Please apply with a copy of your CV by 28th July to Dominic Brown on

Cyber Security Engineer / Leeds or London / £45,000 - £65,000