- London, England, United Kingdom
- On-site
- Mid
- 4–7 years
Build and improve SIEM detection rules, alert pipelines, and automated response playbooks; contribute to incident response readiness; support DLP strategy; conduct cloud security assessments; drive application security initiatives; assess and secure AI/agentic workflows; establish vendor security assessment process.
Compensation
Competitive salary and benefits
Responsibilities
- Build and improve SIEM detection rules, alert pipelines, and automated response playbooks
- Contribute to incident response readiness, including IR playbooks, tabletop exercises, and forensic procedures
- Support DLP strategy and data protection controls across Google Workspace, Slack, and internal tooling
- Conduct cloud security assessments across AWS and Kubernetes environments
- Drive application security initiatives: threat modelling, secure code review support, API testing, and security pipeline improvements