Detection Engineer

1 month ago

London, United KingdomSenior

Responsibilities

Develop, tune, and maintain security detection rules and alerts.
Triage security alerts, conduct investigations, and lead incident response efforts.
Operate Google SecOps (Chronicle), including data onboarding, parsing, rule creation, and dashboarding.
Monitor JAMF-managed macOS endpoints, Google Workspace, Okta, SaaS applications, and Google Cloud environments.
Monitor Google Cloud Security Command Center and translate attack techniques and threat intelligence into actionable detections.
Use Python and Bash to automate detection and response tasks, parse data, and integrate security tooling.
Continuously improve security operations and reduce manual work through automation and AI-enabled workflows.

Proven experience in incident response and security operations, including alert triage, investigations, and response leadership.
Strong detection engineering experience developing, tuning, and maintaining security detections and alerts.
Hands-on experience with Google SecOps (Chronicle) SIEM infrastructure, including data onboarding, parsing, rule creation, and dashboarding.
Proficiency monitoring JAMF MDM for macOS endpoints, Google Workspace, Okta, and general SaaS applications.
Experience with cloud security monitoring in Google Cloud (GCP), including familiarity with GCP Security Command Center (SCC).
Solid scripting skills in Python and Bash for automation, data parsing, and security-tool integration.
Deep understanding of common attack techniques, threat intelligence, MITRE ATT&CK, and the NIST Cybersecurity Framework.
Strong analytical and problem-solving skills, attention to detail, and the ability to connect disparate information during investigations.

Annual discretionary stipend for professional development.
Annual discretionary stipend for meeting and traveling with colleagues.
Annual company offsite, with previous events held in Croatia and Italy.
Monthly co-working stipend for employees not located near a main hub.
In-country role with a strong preference for candidates in London.
Global, high-velocity work environment with autonomous teams and growth opportunities.

1,001-5,000 employees