Senior Security Engineer, Detection and Response

About This Opportunity

We are representing a confidential cybersecurity organization seeking a Senior Security Engineer, Detection and Response for their London team. Our client is rebuilding their detection and response function with an AI-first engineering approach, and this role will be instrumental in designing and delivering next-generation security capabilities.

This is a remote position where you'll work across the full detection lifecycle—from identifying observability gaps to shipping high-signal detections and leading incident response. You'll leverage automation, intelligence, and AI to scale what a small team can accomplish in a modern, cloud-native environment.

Responsibilities

• Design, build, and maintain detection-as-code capabilities across cloud infrastructure, SaaS applications, endpoints, and identity systems
• Build automated investigation and response workflows that replace manual runbooks, leveraging AI to scale triage, enrichment, containment, and remediation
• Develop and deploy AI/LLM-powered tooling to accelerate investigations, reduce alert fatigue, and extend team capacity
• Lead and participate in incident response activities, including detection, investigation, containment, and retrospectives
• Partner cross-functionally with engineering and platform teams to expand logging, improve observability, and embed detection capabilities into the development lifecycle
• Continuously improve detection quality by analyzing alert performance, tuning for signal quality, and building feedback loops between incidents and detections
• Proactively identify gaps in visibility or coverage and translate ambiguous problem spaces into concrete detection and response solutions
• Adapt quickly to evolving threats, tools, and priorities while maintaining team momentum and effectiveness

What We're Looking For

Required Qualifications:

• 5+ years of experience in detection and response, security engineering, or software engineering with a security focus
• Strong software engineering fundamentals with proficiency in Python, Go, Ruby, or similar languages, and experience working in production codebases
• Hands-on experience with cloud environments (AWS preferred), including services such as CloudTrail, GuardDuty, and VPC flow logs
• Experience with log aggregation and analysis platforms (e.g., Datadog, Splunk, ELK) and endpoint detection tools (e.g., SentinelOne, CrowdStrike)

Preferred Qualifications:

• Experience building AI/LLM-powered security tooling or applying AI to detection, triage, or investigation workflows
• Experience with detection-as-code frameworks or building custom detection pipelines
• Familiarity with containerized environments (Docker, Kubernetes, ECS/EKS)
• Experience with threat intelligence, threat hunting, forensics, or attacker tradecraft frameworks such as MITRE ATT&CK

How We Work With You

When you apply through Get A Job.ai, our recruiting team will conduct an initial screening to understand your experience and career goals. If there's a strong match, we will submit your profile to our client for consideration. Throughout the interview process, we'll provide guidance and support to help you succeed.

Please note: candidates should apply exclusively through Get A Job.ai and should not contact the client directly during the recruitment process.

Benefits

• Health (medical, vision, dental), life, and disability insurance
• Equity stock options
• Retirement plans
• Paid public holidays and unlimited PTO
• Paid maternity and parental leave
• Leaves of absence (including caregiver leave)
• Employee Assistance Program

Visa sponsorship is not available for this position.

Get A Job.ai is an equal opportunity recruiter. We are committed to fostering an inclusive environment and welcome applications from all qualified candidates regardless of race, color, religion, sex, sexual orientation, age, gender identity or expression, national origin, pregnancy, disability, veteran status, or any other protected characteristic.