Senior Security Engineer - Detection Engineering - KQL/CrowdStrike CQL

Senior Security Engineer - Detection Engineering - KQL/CrowdStrike CQL requirement for an immediate start. The Senior Security Engineer - Detection Engineering - KQL/CrowdStrike CQL - Contract will be working for a leading global insurance organisation.

Senior Security Engineer - Detection Engineering - KQL/CrowdStrike CQL Key Skills:

• A career security engineer with senior-level SOC or detection engineering experience
• Strong hands-on Microsoft KQL, including building and tuning Microsoft Defender custom detection rules
• Hands-on CrowdStrike Falcon experience with CQL (CrowdStrike Query Language/Falcon LogScale/NG-SIEM)
• Proven experience rewriting and optimising detection logic when moving from Microsoft Defender to CrowdStrike
• Solid understanding of MITRE ATT&CK and threat actor techniques for building detection use cases
• Experience testing and fine-tuning detections to reduce false positives
• Comfortable working independently and documenting detection logic clearly for the wider team
• Financial services or insurance experience is desirable

Senior Security Engineer - Detection Engineering - KQL/CrowdStrike CQL - Inside IR35 Hybrid - 6 month Initial Contract - Immediate Start