Senior Security Engineer - Blue Team
Leads blue-team detection, incident response, vulnerability management, security automation, and risk mitigation for a SaaS platform. The role requires 5+ years of security engineering and operations experience, strong AWS and infrastructure-security knowledge, and the ability to mentor other engineers.
About the job
Responsibilities
- Lead improvements in detection and response capabilities, optimising monitoring, alerting, and incident response processes.
- Mentor junior and mid-level engineers and provide guidance for professional development.
- Participate in an on-call rotation, responding to escalated security incidents and coordinating resolutions.
- Deliver thorough and professional support for security incidents and stakeholder requests.
- Define and implement security practices aligned with organisational goals and industry standards.
- Own security project execution, prioritising tasks and aligning initiatives with team and company objectives.
- Optimise SIEMs, vulnerability scanners, and other security tools for detection, logging, and analysis.
- Conduct vulnerability assessments, identify security-control gaps, and implement mitigation strategies.
- Support compliance efforts, including documentation, audits, and regulatory standards.
- Collaborate with development and IT teams to integrate security best practices into architectures.
- Lead security-awareness initiatives covering advanced security topics and secure coding practices.
- Evaluate emerging security threats, technologies, tools, and methodologies.
- Provide guidance on risk identification and mitigation processes.
- Develop and document security processes and procedures for routine and high-stress incidents.
- Report on incidents, vulnerabilities, project progress, and metrics to support security decisions.
- Develop scripts and tools to automate repetitive security tasks and improve detection and response through tool integration.
Requirements
- Bachelor's degree in Computer Science, Information Security, or a related field, or equivalent security experience.
- 5+ years of experience in security engineering and operations, including blue team operations, security architecture, DevOps, and general operations.
- Deep knowledge of information technology, evolving threats, attack patterns, incident response, and cybersecurity standards.
- Experience developing and leading incident response, including remediation, mitigation, status updates, and reporting.
- Experience evaluating security events, investigating incidents, applying countermeasures, and monitoring impact.
- Strong understanding of operating-system, networking, and application hardening for Windows, macOS, and Linux, including virtualisation security.
- Experience deploying, maintaining, and administering IDS, DLP, FIM, firewalls, SIEM, MFA, vulnerability-assessment tools, web proxies, and WAFs.
- Experience with cloud providers and Infrastructure as Code tools such as Terraform, Ansible, or CloudFormation.
- Proficiency in AWS security best practices.
- Skills in automation, development, or scripting for security operations.
- Advanced knowledge of application security, modern web protocols, and Web Application Firewalls.
- Proficiency in email-security protocols including SPF, DKIM, and DMARC.
Skills
SIEM, Terraform, Ansible, CloudFormation, AWS, Incident Response, Vulnerability Assessment, Firewalls, Web Application Firewall, Infrastructure As Code, Python, Windows, macOS, Linux, Dmarc
Similar jobs
Security Engineering jobs
Docker
United KingdomSenior offensive security engineer responsible for penetration testing, adversary emulation, exploit development, threat modeling, and security automation across cloud, container, SaaS, and AI/ML systems. Requires at least 3 years of security engineering experience, strong development skills, and hands-on offensive security expertise.
Writer
London, United Kingdom
Build AI-focused detection and response capabilities, investigate incidents, and hunt threats across distributed training and inference infrastructure. The role requires staff-level security engineering experience, including 3+ years securing AI/ML or distributed systems and strong automation and detection skills.
Monarch
Remote
Own and scale security governance, risk, compliance, and customer assurance programs, including audits, controls monitoring, third-party risk, policies, and security questionnaires. The role requires 3–5 years of security GRC experience and hands-on understanding of IAM, endpoint, and cloud controls.
Trail of Bits
United Kingdom
Senior security engineer who red teams formally verified systems, assesses proof and threat-model boundaries, and builds AI-driven vulnerability discovery and exploit-generation tooling. Requires hands-on offensive security, formal methods, systems expertise, software development, and rigorous technical reporting.
GitLab
IsraelLeads high-severity security investigations and end-to-end incident response for GitLab’s cloud and corporate environments. The role focuses on DFIR, detection engineering, automation, AI-assisted workflows, executive communication, and improving operational maturity within a global 24/7 team.