data engineer

machine learning engineer

ai engineer

senior software engineer

software engineer

cyber security engineer

<div><h2 class="jobSectionHeader"><b>Description</b></h2>
<div>
<p>The Threat-Led Detection Engineer will design, build, and maintain high-quality threat detections within WTW&rsquo;s Global Information and Cyber Security Defence (ICSD) function, helping WTW detect adversary activity quickly and accurately across its global estate. This is a hands-on engineering role for someone with a strong cyber security mindset and a genuine interest in how attackers operate. You will write and tune detection rules, map coverage to real adversary behaviour, and contribute to a well-maintained, version-controlled detection library. Working closely with SOC, Threat Hunting, Cyber Threat Intelligence (CTI), and Incident Response, you will turn intelligence and hunt findings into reliable detections, embracing a threat-led, Detection-as-Code approach.</p>
<p>
The individual will work as part of a global, multi-disciplined security community with strong support across the business, helping to foster a security-aware culture while ensuring WTW remains a great place to work. With WTW&rsquo;s large global footprint, this role offers a varied and stimulating range of work, and occasional global travel may be required. <b>The role is based in London and follows a hybrid working model, with the expectation of attending the office as and when required on business demand.</b></p>
<p><b>
The Role:</b><br>
<br>
The Threat-Led Detection Engineer will build and maintain detections within WTW&rsquo;s Global Cyber Security Defence team. Responsibilities of this role will include:</p>
<ul>
<li>Design, write, test, and maintain high-fidelity detection rules across SIEM, EDR/XDR, cloud, identity, and network data sources.</li>
<li>Apply a threat-led approach, developing detections mapped to adversary tradecraft using the MITRE ATT&amp;CK framework, the Cyber Kill Chain, and the Diamond Model.</li>
<li>Rapidly create new detections in response to emerging threats, Cyber Threat Intelligence, and incident or hunt findings.</li>
<li>Contribute to the detection library, ensuring detections are version-controlled, documented, tested, and mapped to MITRE ATT&amp;CK coverage.</li>
<li>Tune and optimise existing detections to reduce false positives and continuously improve fidelity.</li>
<li>Practise Detection-as-Code, using Git-based workflows, peer review, and automated testing for detection content.</li>
<li>Validate detections through adversary emulation and testing (e.g. Atomic Red Team) and collaborate on purple-team exercises.</li>
<li>Support the integration of AI and automation into detection and triage workflows, and help build detections for AI/GenAI-specific threats.</li>
<li>Collaborate with SOC, Threat Hunting, CTI, and Incident Response to close detection gaps surfaced during hunts and incidents.</li>
<li>Write clear detection documentation and response guidance so each detection is actionable for analysts.</li>
<li>Onboard and validate new log sources and telemetry to expand detection coverage.</li>
<li>Contribute to detection coverage and quality metrics to help measure and improve detection effectiveness.</li>
</ul></div><h2 class="jobSectionHeader"><b>Qualifications</b></h2>
<div>
<p><b>What you'll bring:</b></p>
<p>
We are looking for a candidate for the Threat-Led Detection Engineer role who has the following:</p>
<p>
Must-have:</p>
<ul>
<li>Strong background in cyber security with hands-on detection engineering, SOC, or threat-hunting experience.</li>
<li>Strong cyber security mindset and a solid, thorough understanding of attacker behaviour and the modern threat landscape.</li>
<li>Working knowledge of the MITRE ATT&amp;CK framework, the Cyber Kill Chain, and the Diamond Model, with the ability to map detections to them.</li>
<li>Hands-on experience writing and tuning detection rules using query languages such as KQL, SPL, EQL, or Sigma on platforms like Microsoft Sentinel, Splunk, Elastic, CrowdStrike, or Microsoft Defender XDR.</li>
<li>Ability to develop high-fidelity detections swiftly in response to emerging threats and intelligence.</li>
<li>Experience maintaining detection content and contributing to a detection library.</li>
<li>Familiarity with Detection-as-Code concepts: Git, version control, and automated testing of detection content.</li>
<li>Awareness of AI/ML in security operations and AI-specific threats (e.g. prompt injection, sensitive-data exposure via GenAI), with awareness of the OWASP LLM Top 10 and MITRE ATLAS.</li>
<li>Exposure to cloud detection across Azure, AWS, and/or GCP and to cloud and identity log sources (e.g. Entra ID, CloudTrail).</li>
<li>Good written and verbal communication skills, able to document detections clearly and collaborate across teams.</li></ul><br>
<p></p>
<p>
Good to have:</p>
<ul>
<li>Threat-hunting mindset and experience hunting for novel or emerging threats to feed detection development.</li>
<li>Experience with adversary emulation and breach-and-attack-simulation tooling (Atomic Red Team, Caldera) and purple teaming.</li>
<li>Scripting skills (e.g. Python, PowerShell) for automation and enrichment.</li></ul><br>
<p></p>
<p><b>
What we offer:</b></p>
<p>
Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company.</p>
<p>
We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you.</p>
<p><b>
Equal Opportunity Employer</b></p>
<p>
We&rsquo;re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email <b>candidatehelpdesk@wtwco.com</b></p></div></div>

Threat-Led Detection Engineer

Data Idols

<div><h2 class="jobSectionHeader"><b>Staff Security Engineer</b></h2>
<p><b>
Salary:</b> Up to &pound;150,000 + Benefits</p>
<p><b>
Location:</b> London (Hybrid &ndash; 3 days per week in the office)</p>
<p>
We are currently looking for a <b>Staff Security Engineer</b> to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Staff Security Engineer will play a pivotal role in shaping the organisation&rsquo;s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.</p>
<p>
This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.</p>
<h2 class="jobSectionHeader"><b>
The Opportunity</b></h2>
<p>
As the Staff Security Engineer, you&rsquo;ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure-by-design culture across the business.</p>
<p>
Key responsibilities include:</p>
<ul>
<li>Driving application and product security initiatives across multiple engineering teams</li>
<li>Conducting security reviews, threat modelling and risk assessments</li>
<li>Implementing and improving vulnerability management processes</li>
<li>Embedding security tooling into CI/CD pipelines and development workflows</li>
<li>Partnering with developers to promote secure coding practices</li>
<li>Reviewing cloud infrastructure and architecture from a security perspective</li>
<li>Supporting incident response and remediation activities when required</li>
<li>Defining and promoting security standards, policies and best practices</li>
<li>Influencing technical decision-making across engineering and leadership teams</li>
</ul>
<p>This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.</p>
<h2 class="jobSectionHeader"><b>
What&rsquo;s in it for you?</b></h2>
<ul><li>Salary up to &pound;150,000</li>
<li>Hybrid working model</li>
<li>Opportunity to work on cutting-edge AI and technology products</li>
<li>High level of autonomy and influence</li>
<li>Collaborative engineering culture</li>
<li>Career progression opportunities as the business continues to scale</li>
<li>Ongoing learning and professional development</li>
<li>Pension scheme</li>
<li>Generous holiday allowance</li>
</ul><h2 class="jobSectionHeader"><b>Skills and Experience</b></h2>
<ul><li>Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer</li>
<li>Strong understanding of application security principles and secure software development practices</li>
<li>Experience working closely with software engineering teams</li>
<li>Hands-on experience securing cloud environments (AWS, GCP or Azure)</li>
<li>Experience with vulnerability management, threat modelling and security reviews</li>
<li>Knowledge of CI/CD security and modern development practices</li>
<li>Excellent stakeholder management and communication skills</li>
</ul><h3 class="jobSectionHeader"><b>Eligibility</b></h3>
<p><b>
Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.</b></p>
<p>
If you would like to be considered for the role and feel you would be an ideal fit, please submit your CV by clicking the Apply button below.</p></div><div></div>

Staff Security Engineer

Leonardo

<div><p><b>Job Description:</b></p><div><b><i>
Salary Range:</i></b><i> </i>&pound;40,000 &ndash; &pound;71,400 basic with a 12.5% uplift</div><p></p><div><div><div><div><div><div><div><div><div><p><i>
Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity.</i></p></div></div></div></div></div></div></div></div></div><p></p><p><b>
Your impact</b></p><p>
Our Central London team is looking for talented and enthusiastic analysts to perform weapon system assessments for our UK Ministry of Defence (MOD) customer. The role will suit either recent STEM graduates, postgraduates, or those with relevant industry experience of systems engineering who wish to apply their abilities in a technical analysis and systems assessment environment. You will help ensure that MOD&rsquo;s weapon assessments are robust and delivered in a timely manner to UK Defence partners and front-line forces.</p><p></p><p>
This is intended as a fulltime position, but we would consider part time working of 4 days per week. This is primarily an on-site role with some possibility for hybrid working.</p><ul><li><b>
Customer Integration:</b> You will be a member of a weapons project team within our larger Defence Analytics Group working in Central London. The group is integrated into a joint unit with government employees, members of the armed forces, and other contractors.</li><li><b>
The Challenge:</b> To conduct analysis to assess the performance and capability of weapon systems. Complex problems are solved through the application of scientific methods, physical principles, data analytics, and AI and Machine Learning to intractable data sets. This process may involve new techniques and their encapsulation in improved tools.</li><li><b>
Collaboration:</b> You will be working in close liaison with teams within the UK and partner nations, with the opportunity to contribute, influence, challenge and improve joint ways of working and knowledge.</li><li><b>
Breadth:</b> You will be working in an environment where both the complexity and capabilities of the systems are continually evolving throughout the world.</li></ul><p></p><p><b>
What you&rsquo;ll do as a Defence Analytics Engineer:</b></p><ul><li>
Conduct analysis through the application of physical principles to real world problems. This will be facilitated through the suite of in-house software tools and the development of ad-hoc software, primarily in Python.</li><li>
Production of reports and presentations of your work and presentation of them to local MOD customers and the wider community both within the UK and partner nations.</li><li>
Provide ad hoc advice and support to MOD customers, often at short notice.</li><li>
Use your developing experience and knowledge to propose and implement improvements to tools and processes.</li><li>
In conjunction with the project team conduct regular liaison with both MOD and the wider customer base to keep them informed of recent developments and to determine future analysis requirements.</li><li>
Seek co-operative and collaborative approaches with our UK and multi-national partners, identifying best practice.</li><li>
Travel for technical exchanges with our partners, in the UK and abroad.</li></ul><p></p><p><b>
What you&rsquo;ll bring</b></p><ul><li>
A good understanding of scientific methods and their use through the application of fundamental physical principles.</li><li>
A degree in a STEM subject and strong numerical and analytical skills, with the ability to apply these to real world problems.</li><li>
Good Interpersonal skills to facilitate collaborative and effective working within an inter-disciplinary team.</li><li>
Ability to problem solve and self-steer, work to deadlines as necessary, sometimes at short notice.</li><li>
Ability to communicate, both in writing and verbally, with audiences of differing technical backgrounds and seniority.</li><li>
Although not essential, an appreciation of aerospace technologies, such as aerodynamics, propulsion, guidance &amp; control, weapon systems and sensors would be an advantage.</li><li>
Experience of Python, C# and AI/ML would be a distinct advantage.</li></ul><p></p><p>
This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn.</p><p></p><p><b>
Security Clearance</b></p><p>
This role is subject to pre-employment screening in line with the UK Government&rsquo;s Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) will apply, this will include meeting the eligibility requirements for The Security Check (SC) and Developed Vetting (DV). For more information and guidance please visit: https://careers.uk.leonardo.com/gb/en/security-and-vetting</p><p></p><p><b>
Why join us</b></p><p>
At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work&ndash;life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we&rsquo;re here to help you thrive.</p><ul><li><b>
Time to Recharge:</b> Enjoy generous leave with the opportunity to accrue up to 12 additional flexi-days each year.</li><li><b>
Secure your Future:</b> Benefit from our award-winning pension scheme with up to 15% employer contribution.</li><li><b>
Your Wellbeing Matters:</b> Free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity).</li><li><b>
Rewarding Performance</b>: All employees at management level and below are eligible for our bonus scheme.</li><li><b>
Never Stop Learning</b>: Free access to 4,000+ online courses via Coursera and LinkedIn Learning.</li><li><b>
Refer a friend: </b>Receive a financial reward through our referral programme.</li><li><b>
Tailored Perks</b>: Spend up to &pound;500 annually on flexible benefits including private healthcare, dental, family cover, tech &amp; lifestyle discounts, gym memberships and more.</li><li><b>
Flexible working:</b> Flexible hours with hybrid working options. For part time opportunities, please talk to us about what might be possible for this role.</li></ul><p></p><p>
For a full list of our company benefits please visit our website.</p><p></p><p>
Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team&mdash;they are key contributors to shaping innovation, advancing technology, and enhancing global safety.</p><p></p><p>
At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know.</p><p></p><p>
Be part of something bigger - apply now!</p><p></p><p><b>
Primary Location:</b>
</p>GB - London - Whitehall<p></p><p><b>
Contract Type:</b></p>
Permanent<p></p><p><b>
Hybrid Working:</b></p>
Onsite</div>

Defence Analytics Engineer

<div><h2 class="jobSectionHeader"><b>Description</b></h2>
<div>
<p><b>The Threat-Led Detection Engineer Lead</b> will drive WTW&rsquo;s detection engineering capability within the Global Information and Cyber Security Defence (ICSD) function, owning the strategy, quality, and continuous improvement of how WTW detects threats across its global estate in AI era. This role blends deep technical detection expertise with team leadership, driving a threat-led, intelligence-informed approach to detection that maps directly to real adversary behaviour.</p>
<p>
The Lead will set the standard for how detections are designed, written, tested, documented, and maintained &ndash; championing Detection-as-Code, measurable detection coverage, and a strong engineering culture. Working closely with SOC, Threat Hunting, Cyber Threat Intelligence (CTI), Incident Response, and Vulnerability</p>
<p>
Management teams, the Lead will ensure WTW&rsquo;s detection library evolves ahead of the threat landscape.<br>
The individual will work as part of a global, multi-disciplined security community with strong support across the business, helping to foster a security-aware culture while ensuring WTW remains a great place to work. With WTW&rsquo;s large global footprint, this role offers a fascinating range of work, and occasional global travel may be required.</p>
<p>
The Threat-Led Detection Engineer Lead will grow WTW&rsquo;s detection engineering function within the Global Cyber Security Defence team. Responsibilities of this role will include:</p>
<ul>
<li>Drive WTW&rsquo;s detection engineering strategy, setting the vision, standards, and roadmap for threat-led detection across cloud, endpoint, identity, network, and SaaS environments.</li>
<li>Lead, mentor, and grow a team of detection engineers, establishing engineering best practices, peer review, and a culture of high-quality, well-documented detections.</li>
<li>Drive a threat-led detection approach, prioritising detection development against adversary tradecraft using the MITRE ATT&amp;CK framework, the Cyber Kill Chain, and the Diamond Model of Intrusion Analysis.</li>
<li>Translate Cyber Threat Intelligence and threat-hunting findings into robust, high-fidelity detections with low false-positive rates.</li>
<li>Establish, own, and maintain the central detection library, ensuring detections are version-controlled, tested, documented, and mapped to MITRE ATT&amp;CK coverage.</li>
<li>Champion Detection-as-Code, implementing Git-based workflows, CI/CD pipelines, automated testing, and peer review for all detection content.</li>
<li>Define and track detection coverage, efficacy, and quality metrics (e.g. ATT&amp;CK coverage, detection fidelity, time-to-detect) and report on detection posture to senior leadership.</li>
<li>Lead detection validation and tuning through adversary emulation, purple-team exercises, and breach-and-attack-simulation tooling (e.g. Atomic Red Team, Caldera).</li>
<li>Support the integration of AI and automation into detection workflows &ndash; including AI-assisted detection authoring, enrichment, and triage &ndash; and lead detection efforts for AI/GenAI-specific threats.</li>
<li>Partner with SOC, Threat Hunting, CTI, Incident Response, and Vulnerability Management to close detection gaps identified during incidents and hunts.</li>
<li>Govern the full detection lifecycle: intake, development, testing, deployment, monitoring, tuning, retirement, and continuous improvement.</li>
<li>Evaluate and onboard new log sources, telemetry, and tooling to expand detection coverage across the global estate.</li>
<li>Set standards for detection documentation, runbooks, and response guidance so every detection is clear and actionable for the SOC.</li></ul><br>
<p></p>
</div>
<h2 class="jobSectionHeader"><b>Qualifications</b></h2>
<div>
<p>We are looking for a candidate for the Threat-Led Detection Engineer Lead role who has the following:
</p><p><b>Must-have</b></p>
<ul>
<li>5+ years in cyber security with detection engineering experience, including a track record of leading, mentoring, or coordinating technical teams.</li>
<li>Strong cyber security mindset with a deep, thorough understanding of adversary behaviour, attacker tradecraft, and the modern threat landscape.</li>
<li>Expert knowledge of the MITRE ATT&amp;CK framework, the Cyber Kill Chain, and the Diamond Model, with proven ability to map and drive detection coverage against them.</li>
<li>Proven expertise writing, testing, and maintaining detection rules across SIEM and EDR/XDR platforms (e.g. Microsoft Sentinel, Splunk, Elastic, CrowdStrike, Microsoft Defender XDR), using query languages such as KQL, SPL, EQL, or Sigma.</li>
<li>Demonstrated ability to develop high-fidelity detections swiftly in response to emerging threats, intelligence, and live incidents.</li>
<li>Experience owning and maturing a detection library, including detection lifecycle governance and ATT&amp;CK coverage mapping.</li>
<li>Hands-on experience with Detection-as-Code: Git, version control, CI/CD pipelines, and automated testing of detection content.</li>
<li>Understanding of AI/ML in security operations and awareness of AI-specific threats (prompt injection, model/data poisoning, sensitive-data exposure via GenAI), with familiarity with the OWASP LLM Top 10 and MITRE ATLAS.</li>
<li>Exceptional written and verbal communication skills, able to convey complex technical concepts to both engineers and non-technical stakeholders, including executives.</li></ul><br>
<p></p>
<p><b>
Good to have</b></p>
<ul>
<li>Strong threat-hunting mindset and hands-on hunting experience to proactively surface detection gaps and feed detection development.</li>
<li>Scripting and automation skills (e.g. Python, PowerShell) for tooling, enrichment, and SOAR integration.</li>
<li>Familiarity with detection data pipelines (log routing, parsing, normalisation, data lakes) and how they affect detection quality.</li></ul><br>
<p></p>
<p><i>
We&rsquo;re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidate.helpdesk@willistowerswatson.com.</i></p></div></div>

Threat-Led Detection Engineer - Lead

CrowdStrike

<div><p>As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn&rsquo;t changed &mdash; we&rsquo;re here to stop breaches, and we&rsquo;ve redefined modern security with the world&rsquo;s most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We&rsquo;re always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you.</p><p><b><br>
About the Role:</b></p><p>
Does building systems that help security analysts close a critical incident before it becomes a breach excite you? Does correlating and analyzing data at trillions-of-events-per-day scale sound like the kind of challenge you want to wake up to? Do you care deeply about cybersecurity and want to play an active role in helping organizations defend themselves from sophisticated cyberattacks? We'd love to meet you.</p><p></p><p>
We are seeking a Senior Software Engineer, Cloud to join our Threat Detection and Incident Response (TDIR) team, helping revolutionize security management with our AI-native Falcon Next-Gen SIEM platform &ndash; enabling customers to detect, investigate, and hunt down threats 150x faster at Petabyte scale.</p><p></p><p>
You'll design, architect, and develop world-class case management and investigation capabilities in Go, empowering security analysts to be more effective at incident response, threat hunting, and collaborative investigations. You'll build intelligent workflows that connect detections, evidence, and response actions into cohesive cases. Leveraging advanced correlation, contextual enrichment, and AI/ML-powered insights, you'll help security teams work smarter through intelligent threat prioritization, automated investigation suggestions, and agentic analyst workflows &ndash; <i>helping them respond faster to emerging threats.</i></p><p></p><p>
While Go experience is preferred, strong backend engineers from other languages who can demonstrate rapid adaptability and a track record of delivering at scale are welcome to apply. If this is the kind of scale and impact you're looking for, we'd love to hear from you.</p><p></p><p><b>
What You&rsquo;ll do:</b></p><ul><li><p><i>
Own the engineering bar</i>. Drive architectural improvements, set the standard for code quality, and ensure our systems are performant, reliable, and built to last &ndash; not just for today's scale, but for what's next</p></li><li><p>
Lead system design and architecture decisions, including design reviews and RFC processes</p></li><li><p>
Develop Go-based microservices supporting threat detection, case management, and incident response workflows, alongside RESTful APIs that power customer-facing capabilities</p></li><li><p>
Take end-to-end ownership of technical initiatives, both individually and as part of a team, across projects of increasing scope and complexity</p></li><li><p>
Work closely with designers, product managers, and engineers across product groups to understand, design, and implement solutions</p></li><li><p>
Mentor junior and mid-level engineers through pair programming, code reviews, and one-on-one knowledge sharing</p></li><li><p>
Contribute to AI-powered capabilities including LLM integration, agentic workflows, and intelligent analyst tooling</p></li><li><p>
Participate in the on-call rotation and drive improvements that reduce your teams toil and increase system reliability</p></li><li><p>
Operate with a high degree of autonomy &ndash; you'll be trusted to make decisions and drive outcomes</p></li></ul><p></p><p><b>
What You&rsquo;ll Need:</b></p><ul><li><p>
A collaborative team player who lifts those around them (We believe in: <i>One team. One fight</i>!)</p></li><li><p>
8 + years of professional software engineering experience, with 5+ years building and operating distributed systems or cloud-native services at scale in production</p></li><li><p>
Solid understanding of distributed systems, scalability, RESTful patterns, and multithreading concepts</p></li><li><p>
Proficiency building and scaling resilient, low-latency services in production using Go, Python, Java, C++, or C#</p></li><li><p>
Hands-on experience with Docker, Kubernetes, and cloud platforms, preferably AWS or GCP</p></li><li><p>
Strong communicator and collaborator across functions and levels, with a bias for ownership and a customer-first mindset</p></li><li><p>
Proven ability to translate complex and ambiguous business requirements into technical solutions and deliver projects on schedule</p></li><li><p>
Proven experience utilizing AI technologies to enhance decision-making, streamline workflows and processes, improve efficiency and drive business outcomes.</p></li></ul><p></p><p><b>
Bonus points:</b></p><ul><li><p>
Currently developing Go-based microservices for scalable, high-throughput architectures</p></li><li><p>
Experience in cybersecurity, SIEM, SOAR, or adjacent security domains</p></li><li><p>
Hands-on experience with LLM integration, prompt engineering, RAG pipelines, or agentic AI frameworks</p></li></ul><p></p><p>
#LI-GO1</p><p>
#LI-HYBRID</p><p></p><p><b>
Benefits of Working at CrowdStrike:
</b></p><ul><li><p>Market leader in compensation and equity awards</p></li><li><p>
Comprehensive physical and mental wellness programs</p></li><li><p>
Competitive vacation and holidays for recharge</p></li><li><p>
Paid parental and adoption leaves</p></li><li><p>
Professional development opportunities for all employees regardless of level or role</p></li><li><p>
Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections</p></li><li><p>
Vibrant office culture with world class amenities</p></li><li><p>
Great Place to Work Certified&trade; across the globe
</p></li></ul><p></p><p>CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program.</p><p></p><p>
CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions-including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs-on valid job requirements.</p><p></p><p>
If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at recruiting@crowdstrike.com for further assistance.</p></div>

Sr. Backend Engineer, Cloud - Threat Detection / Incident Response (Hybrid, London)

Intercom

<div><div><p>Fin is the AI Customer Agent company on a mission to help businesses provide perfect customer experiences.</p>
<p>
Our AI Agent Fin is the highest-performing AI Customer Agent on the market today, enabling businesses to deliver impeccable, always-on customer support across the customer journey &ndash; from service, to sales, to ecommerce. Powered by our own AI models, Fin resolves complex customer issues end-to-end across every channel, with minimal set-up and integration. Fin can also be combined with our natively integrated Intercom help desk for one single system that is designed to meet the needs of modern day support teams.</p>
<p>
Founded in 2011, Fin became one of the fastest growing companies and remains one of the largest private software companies in the world with nearly 30,000 global businesses using our products to transform their customer support. Driven by our core values, we push boundaries, build with speed and intensity, and relentlessly deliver incredible value to our customers.</p></div><div><h2 class="jobSectionHeader"><b>
What's the opportunity?</b></h2>
<p>
Fin is transforming customer service through AI, helping businesses deliver fast, accurate, and reliable support at scale. Trust is foundational to that mission.</p>
<p>
The Cloud Security team is responsible for protecting the platforms that power Fin. We partner closely with infrastructure and product engineering teams to secure cloud environments, detect emerging threats, respond to incidents, and build the security foundations that enable teams to move quickly with confidence. The team owns critical cloud security capabilities including detection engineering, cloud security monitoring, incident response, cloud security controls, and the security tooling that protects Fin's production environments. The team is responsible for securing the cloud platforms and production systems that underpin every Fin customer interaction.</p>
<p>
The mission of the team is to help Fin build and operate trusted AI-powered customer service experiences by making security a natural part of how our cloud platforms, production systems, and engineering workflows are designed, deployed, and operated. As Fin continues to expand its capabilities and adoption, you'll help define how cloud security evolves alongside increasingly sophisticated systems and threat models. We're taking an AI-first approach to security, investing in areas such as AI-assisted detection engineering, automated investigations, continuous monitoring, and emerging defensive capabilities to help meet an evolving threat landscape.</p>
<h2 class="jobSectionHeader"><b>
What will I be doing?</b></h2>
<ul><li>Design and implement secure cloud architectures across our AWS environments.</li>
<li>Build and maintain protective and detective controls that improve visibility into threats across our cloud environments.</li>
<li>Develop detection engineering capabilities that identify attacker behaviour and reduce time to detection and response.</li>
<li>Lead cloud security investigations and incident response activities in partnership with engineering teams.</li>
<li>Participate in a shared on-call rotation and help coordinate containment, remediation, and recovery efforts during security incidents.</li>
<li>Build automation that improves the scalability, reliability, and effectiveness of security controls.</li>
<li>Partner with infrastructure teams to embed security into cloud platforms, infrastructure-as-code workflows, and engineering practices.</li>
<li>Develop and improve cloud security standards, guidance, and best practices across Fin.</li>
<li>Drive security initiatives from problem definition through design, implementation, and measurable outcomes.</li>
<li>Assess emerging threats to cloud environments and help evolve our defensive capabilities.</li>
<li>Help shape Fin's AI-first approach to security, including AI-assisted detection, automated investigations, continuous monitoring, and emerging defensive capabilities.</li>
<li>Support the secure adoption of AI-assisted software development tools and engineering workflows.</li>
</ul><h2 class="jobSectionHeader"><b>What skills do I need?</b></h2>
<ul><li>Proven experience in cloud security, security engineering, detection engineering, or a closely related field.</li>
<li>Strong experience securing and operating production AWS environments.</li>
<li>Deep understanding of cloud security principles, modern attack techniques, and security best practices.</li>
<li>Experience building or operating detection, monitoring, or threat detection capabilities.</li>
<li>Hands-on experience investigating security incidents, leading technical investigations, and driving remediation efforts.</li>
<li>Experience implementing security controls across cloud platforms and production environments.</li>
<li>Strong programming skills and experience building automation, tooling, or operational workflows.</li>
<li>Experience working with infrastructure-as-code practices and modern cloud-native technologies.</li>
<li>Comfortable using modern AI-assisted development tools to improve productivity and engineering effectiveness.</li>
<li>Ability to communicate security concepts clearly and collaborate effectively with engineering teams.</li>
<li>A pragmatic approach to balancing security, customer impact, and engineering velocity.</li>
</ul><h2 class="jobSectionHeader"><b>Bonus skills &amp; attributes</b></h2>
<ul><li>Experience building detection engineering, threat hunting, or security operations capabilities at scale.</li>
<li>Experience with cloud-native security platforms, CNAPP technologies, or large-scale cloud security monitoring.</li>
<li>Experience applying AI to detection, response, threat analysis, or security operations workflows.</li>
<li>Familiarity with AWS networking, identity, and cloud security patterns.</li>
<li>Experience working across both large-scale SaaS environments and high-growth companies.</li>
</ul><h2 class="jobSectionHeader"><b>Benefits</b></h2>
<p>
We are a well treated bunch, with awesome benefits! If there&rsquo;s something important to you that&rsquo;s not on this list, talk to us!</p>
<ul>
<li>Competitive salary and equity in a fast-growing start-up</li>
<li>We serve lunch every weekday, plus a variety of snack foods and a fully stocked kitchen</li>
<li>Regular compensation reviews - we reward great work!</li>
<li>Unlimited access to Claude Code and best-in-class AI tools; experimentation &amp; building is encouraged &amp; celebrated.</li>
<li>Pension scheme &amp; match up to 4%</li>
<li>Peace of mind with life assurance, as well as comprehensive health and dental insurance for you and your dependents</li>
<li>Flexible paid time off policy</li>
<li>Paid maternity leave, as well as 6 weeks paternity leave for fathers, to let you spend valuable time with your loved ones</li>
<li>If you&rsquo;re cycling, we&rsquo;ve got you covered on the Cycle-to-Work Scheme. With secure bike storage too</li>
<li>MacBooks are our standard, but we also offer Windows for certain roles when needed.</li>
</ul>
<p>#LI-Hybrid</p></div><div><p><b>
Policies</b></p>
<p>
Fin has a hybrid working policy. We believe that working in person helps us stay connected, collaborate easier and create a great culture while still providing flexibility to work from home. We expect employees to be in the office at least three days per week.</p>
<p>
We have a radically open and accepting culture at Fin. We avoid spending time on divisive subjects to foster a safe and cohesive work environment for everyone. As an organization, our policy is to not advocate on behalf of the company or our employees on any social or political topics out of our internal or external communications. We respect personal opinion and expression on these topics on personal social platforms on personal time, and do not challenge or confront anyone for their views on non-work related topics. Our goal is to focus on doing incredible work to achieve our goals and unite the company through our core values.
</p><p>Fin values diversity and is committed to a policy of Equal Employment Opportunity. Fin will not discriminate against an applicant or employee on the basis of race, color, religion, creed, national origin, ancestry, sex, gender, age, physical or mental disability, veteran or military status, genetic information, sexual orientation, gender identity, gender expression, marital status, or any other legally recognized protected basis under federal, state, or local law.</p></div></div>

Cloud Security Engineer

<div><h2 class="jobSectionHeader"><b>Lead Software Security Engineer</b></h2>
<p><b>
Salary:</b> Up to &pound;150,000 + Benefits</p>
<p><b>
Location:</b> London (Hybrid &ndash; 3 days per week in the office)</p>
<p>
We are currently looking for a Lead Software<b> </b>Security Engineer to join a fast-growing, innovative technology business operating at the forefront of AI and data-driven products. This is an exciting opportunity to join a highly collaborative, engineering-led environment where security is viewed as a key enabler of innovation. Reporting to the Head of Engineering, the Lead Security Engineer will play a pivotal role in shaping the organisation&rsquo;s security posture, working closely with software engineers, platform teams and technical leadership to embed security throughout the software development lifecycle.</p>
<p>
This is not a traditional SOC or operational security position. Instead, the Security Engineer will focus on securing applications, cloud infrastructure and development practices, helping the business build secure products at scale whilst influencing security strategy across the wider organisation.</p>
<h2 class="jobSectionHeader"><b>
The Opportunity</b></h2>
<p>
As the Lead Security Engineer, you&rsquo;ll work at the intersection of software engineering, cloud infrastructure and cyber security, helping to build and maintain a secure-by-design culture across the business.</p>
<p>
Key responsibilities include:</p>
<ul>
<li>Driving application and product security initiatives across multiple engineering teams</li>
<li>Conducting security reviews, threat modelling and risk assessments</li>
<li>Implementing and improving vulnerability management processes</li>
<li>Embedding security tooling into CI/CD pipelines and development workflows</li>
<li>Partnering with developers to promote secure coding practices</li>
<li>Reviewing cloud infrastructure and architecture from a security perspective</li>
<li>Supporting incident response and remediation activities when required</li>
<li>Defining and promoting security standards, policies and best practices</li>
<li>Influencing technical decision-making across engineering and leadership teams</li>
</ul>
<p>This role offers the opportunity to make a genuine impact within a growing technology organisation where security is a strategic priority rather than an afterthought.</p>
<h2 class="jobSectionHeader"><b>
What&rsquo;s in it for you?</b></h2>
<ul><li>Salary up to &pound;150,000</li>
<li>Hybrid working model</li>
<li>Opportunity to work on cutting-edge AI and technology products</li>
<li>High level of autonomy and influence</li>
<li>Collaborative engineering culture</li>
<li>Career progression opportunities as the business continues to scale</li>
<li>Ongoing learning and professional development</li>
<li>Pension scheme</li>
<li>Generous holiday allowance</li>
</ul><h2 class="jobSectionHeader"><b>Skills and Experience</b></h2>
<ul><li>Commercial experience as a Security Engineer, Application Security Engineer, Product Security Engineer or DevSecOps Engineer</li>
<li>Strong understanding of application security principles and secure software development practices</li>
<li>Experience working closely with software engineering teams</li>
<li>Hands-on experience securing cloud environments (AWS, GCP or Azure)</li>
<li>Experience with vulnerability management, threat modelling and security reviews</li>
<li>Knowledge of CI/CD security and modern development practices</li>
<li>Excellent stakeholder management and communication skills</li>
</ul><h3 class="jobSectionHeader"><b>Eligibility</b></h3>
<p><b>
Please note that candidates must have full, unrestricted right to work in the UK. Unfortunately, sponsorship is not available for this position.</b></p>
<p>
If you would like to be considered for the role and feel you would be an ideal fit, please submit your CV by clicking the Apply button below.</p></div><div></div>

Lead Software Security Engineer

Explore 438+ Cyber security engineer in London this July. Find roles across top companies and apply now to boost your career.