AVP Cyber Security Engineer

Reference: 51313

A leading international financial services organisation is seeking a Cyber Security Engineer to join its Proactive Security function. This role will focus on strengthening security capabilities through threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment.

• Permanent (70k - 80k)
  
• London / Hybrid
  
• Must have UK citizenship / ILR Visa / EU settled status
  

Key Responsibilities

Threat Modelling & Security Engineering

• Develop and maintain threat models for business-critical systems and services.
  
• Assess security risks and recommend controls during project design and implementation.
  
• Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation.
  
• Lead security tooling integrations and orchestration initiatives.
  
• Develop and enhance SOAR capabilities.
  
• Support identity-based threat detection, privileged access management, and session monitoring.
  

SIEM Engineering & Security Monitoring

• Design, implement, and maintain SIEM workspaces, data connectors, analytics rules, dashboards, and playbooks.
  
• Develop advanced threat hunting queries and investigation workflows.
  
• Onboard and optimise critical security log sources across on-premise and cloud environments.
  
• Improve detection accuracy through continuous tuning and use case development.
  
• Troubleshoot and resolve log ingestion and data quality issues.
  

Threat Detection & Incident Response

• Design and deploy advanced detection use cases covering modern attack techniques.
  
• Translate threat intelligence into actionable monitoring and detection capabilities.
  
• Perform proactive threat hunting activities.
  
• Contribute to security playbooks, response procedures, and operational improvements.
  

Security Advisory

• Provide expert guidance on application and infrastructure security.
  
• Support the evaluation and proof of concept of emerging security technologies.
  
• Act as a subject matter expert across cyber security initiatives.
  

Required Experience

• 5+ years' experience in Security Engineering, Security Operations, Security Automation, or a related cyber security discipline.
  
• Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering.
  
• Experience developing and supporting SOAR capabilities.
  
• Solid understanding of Active Directory security and Windows event logging.
  
• Proficiency with PowerShell and/or Python scripting.
  
• Good understanding of networking concepts including firewalls, VPNs, proxies, and security protocols.
  
• Experience securing Azure, AWS, or GCP environments.
  
• Knowledge of cyber security frameworks such as NIST, MITRE ATT&CK, and Cyber Kill Chain.
  
• Excellent communication and stakeholder management skills.
  

What You'll Gain

• Opportunity to work in a mature and forward-thinking cyber security environment.
  
• Exposure to enterprise-scale security technologies and cloud platforms.
  
• Ownership of detection engineering, threat hunting, and security automation initiatives.
  
• Collaboration with experienced cyber security professionals across infrastructure, cloud, and security operations teams.
  

Sounds interesting? Apply to find out more!