Senior Security Engineer – Detection & Response

Responsibilities

Our talent team is representing a confidential SaaS organization seeking a Senior Security Engineer - Detection & Response based in London. This engineering-focused role spans the full detection and response lifecycle, where you will leverage software development practices to build detections, triage alerts, lead investigations, respond to incidents, perform threat hunting, and build automation tooling. You'll work on complex large-scale security challenges across enterprise, cloud, and product environments alongside talented colleagues across multiple regions and timezones.

In this role, you will:

• Leverage engineering practices to develop, test, and deploy high-fidelity rule-based and anomaly-based detections-as-code
• Detect and respond to cyber threats using security data lake, SIEM, and cloud platforms
• Respond to alerts, cyber threats, and drive end-to-end incident response investigations
• Perform digital forensic investigations including collection and analysis of evidence
• Automate and codify detection and response workflows and processes
• Build security tooling to drive automation across the D&R lifecycle
• Improve and maintain detection and response pipelines and underlying systems
• Work with the Threat Intelligence team to identify and respond to sophisticated threats
• Develop AI-first security systems to automate detection and response operations
• Conduct threat hunts across corporate, cloud and product environments
• Support data engineering workflows for core security data lake and SIEM platforms
• Participate actively in D&R on-call rotations
• Coach and mentor security engineers within the detection and response team

What We're Looking For

We're seeking candidates with:

• 5+ years of hands-on security experience in modern cloud environments
• Experience in triaging and responding to cyber threats
• Experience in large-scale log analysis, incident response and/or digital forensics
• Experience with centralized security data lakes and SIEM solutions
• Hands-on experience in writing detections-as-code
• Solid data querying skills (e.g. SQL, Splunk)
• Familiarity with large-scale data pipelines and data engineering techniques
• Proficiency in programming languages to automate and build (e.g., Python, Go or similar)
• Proven experience with git/GitHub and CI/CD automations
• Familiarity with tactics, techniques, and procedures used by threat actors
• Experience being part of detection and response or incident response on-call
• Engineering-first and AI-first approach for all work performed
• Strong passion for continuous learning and staying updated on evolving technology
• Strong oral and written communication skills
• Team player with a strong, self-managing work ethic

How We Work With You

When you apply through Get A Job.ai, our recruiting team will review your profile and schedule an initial screening conversation. If there's a strong match, we'll prepare and submit your candidacy to our client for consideration. Throughout the interview process, we'll provide guidance and support. Please note that candidates should not contact the client directly—all communication flows through our team to ensure the best experience for everyone involved.

Pay

This role may require up to 10% travel for purposes such as onboarding, team meetings, and industry events, coordinated in advance.

Equal Opportunity

Get A Job.ai is committed to equal opportunity employment. We welcome applications from all qualified candidates regardless of race, ethnicity, national origin, religion, age, gender identity, sexual orientation, disability, veteran status, or any other protected characteristic.