Senior Detection Engineer

Senior EDR Engineer

Upto £85,000 + Bonus + Excellent Benefits

Hybrid Working

We're working with a major UK retail organisation investing heavily in its Cyber Defence capabilities and seeking an experienced Senior EDR Engineer to join a growing security engineering function.

This is a fantastic opportunity for an endpoint security specialist to take ownership of enterprise-scale EDR and XDR technologies across a complex global environment.

You'll be responsible for engineering, managing and improving endpoint security platforms whilst working closely with Cyber Defence, Incident Response, Threat Intelligence and Security Architecture teams.

What You'll Be Doing

• Engineering and optimising Microsoft Defender XDR, CrowdStrike Falcon and SentinelOne
• Developing advanced threat detections and hunting capabilities
• Building and tuning KQL queries within Defender XDR and Microsoft Sentinel
• Supporting cyber incident investigations and response activities
• Improving detection coverage using threat intelligence and attack simulation outcomes
• Defining EDR policies, standards and best practices
• Supporting platform integrations across the wider security technology estate
• Acting as the technical SME for endpoint security technologies

What We're Looking For

• Experience engineering enterprise EDR or XDR platforms
• Strong Microsoft Defender XDR expertise
• Knowledge of CrowdStrike Falcon and/or SentinelOne
• Hands-on threat hunting experience
• Strong KQL skills
• Experience supporting cybersecurity incident response investigations
• Knowledge of MITRE ATT&CK
• Experience within Security Engineering, Detection Engineering or Cyber Defence environments

Desirable Experience

• Microsoft Sentinel
• Large enterprise environments
• Security platform integrations
• Cloud security exposurewait
• Security certifications including Microsoft, GIAC, ISC2, CrowdStrike or SentinelOne

Benefits

• Annual bonus
• Pension contribution
• Private healthcare
• Life assurance
• Staff discount
• Flexible hybrid working
• Excellent training and certification support
• Career progression within a growing Cyber Defence function