AVP Cyber Security Engineer

A leading international financial services organisation is seeking a Cyber Security Engineer to join its Proactive Security function. This role will focus on strengthening security capabilities through threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment.

• Permanent (£70k - £80k)
• London / Hybrid
• Must have UK citizenship / ILR Visa / EU settled status

Key Responsibilities

Threat Modelling & Security Engineering

• Develop and maintain threat models for business-critical systems and services.
• Assess security risks and recommend controls during project design and implementation.
• Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation.
• Lead security tooling integrations and orchestration initiatives.
• Develop and enhance SOAR capabilities.
• Support identity-based threat detection, privileged access management, and session monitoring.

SIEM Engineering & Security Monitoring

• Design, implement, and maintain SIEM workspaces, data connectors, analytics rules, dashboards, and playbooks.
• Develop advanced threat hunting queries and investigation workflows.
• Onboard and optimise critical security log sources across on-premise and cloud environments.
• Improve detection accuracy through continuous tuning and use case development.
• Troubleshoot and resolve log ingestion and data quality issues.

Threat Detection & Incident Response

• Design and deploy advanced detection use cases covering modern attack techniques.
• Translate threat intelligence into actionable monitoring and detection capabilities.
• Perform proactive threat hunting activities.
• Contribute to security playbooks, response procedures, and operational improvements.

Security Advisory

• Provide expert guidance on application and infrastructure security.
• Support the evaluation and proof of concept of emerging security technologies.
• Act as a subject matter expert across cyber security initiatives.

Required Experience

• 5+ years' experience in Security Engineering, Security Operations, Security Automation, or a related cyber security discipline.
• Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering.
• Experience developing and supporting SOAR capabilities.
• Solid understanding of Active Directory security and Windows event logging.
• Proficiency with PowerShell and/or Python scripting.
• Good understanding of networking concepts including firewalls, VPNs, proxies, and security protocols.
• Experience securing Azure, AWS, or GCP environments.
• Knowledge of cyber security frameworks such as NIST, MITRE ATT&CK, and Cyber Kill Chain.
• Excellent communication and stakeholder management skills.

What You'll Gain

• Opportunity to work in a mature and forward-thinking cyber security environment.
• Exposure to enterprise-scale security technologies and cloud platforms.
• Ownership of detection engineering, threat hunting, and security automation initiatives.
• Collaboration with experienced cyber security professionals across infrastructure, cloud, and security operations teams.