Ion
Ion6mo ago

Security Engineer - Detection Engineering & Automation

London · (london)Full-timemid
SecuritySecurity EngineerCybersecurity
1 views0 saves0 applied
Apply Now

Quick Summary

Overview

The Role: We are seeking a Security Engineer specialising in Detection Engineering and Security Automation to design, build,

Technical Tools
SecuritySecurity EngineerCybersecurity
The Role:

We are seeking a Security Engineer specialising in Detection Engineering and Security Automation to design, build, and operate scalable detection and response capabilities across cloud and enterprise environments.
This role focuses on engineering high-fidelity detections and automating response workflows across platforms such as Rapid7, SentinelOne, and CrowdStrike, using Azure Logic Apps and API-driven integrations to reduce manual effort and improve response speed.
This is a hands-on engineering role for someone who thinks in attacker behaviours, builds resilient automation, and prefers engineering solutions over manual SOC processes.
  • Detection Engineering
  • Design, implement, and continuously improve threat detections across endpoint, identity, vulnerability, and cloud telemetry.
  • Engineer detections using data from Rapid7, SentinelOne, and CrowdStrike, including behavioural, anomaly-based, and contextual detections.
  • Translate MITRE ATT&CK techniques and real-world threat intelligence into actionable detection logic.
  • Develop and tune detection logic to reduce false positives while preserving signal quality.
  • Validate detections through testing, attack simulation, and post-incident review.
  • Maintain detection coverage mapping across the attack lifecycle.

  • Security Automation & SOAR
  • Design and implement security automation workflows using Azure Logic Apps to support alert triage, enrichment, containment, and response.
  • Automate workflows such as:
  • Alert enrichment from asset inventories and vulnerability data
  • Risk-based prioritisation using exploitability and exposure context
  • Endpoint containment or isolation actions
  • Case creation, updates, and closure across security platforms
  • Integrate tools via REST APIs, webhooks, and managed connectors.
  • Build modular, reusable automation components with robust error handling and observability.

  • Platform Integration & Engineering
  • Integrate and correlate telemetry across Rapid7, SentinelOne, CrowdStrike, and supporting security systems.
  • Work closely with security and cloud teams to onboard new data sources and ensure data quality.
  • Apply detection-as-code and automation-as-code principles using version control and structured deployment processes.
  • Build dashboards and metrics to measure detection efficacy, alert quality, and automation impact.

  • Incident Response & Continuous Improvement
  • Support incident response by enhancing detections and automations based on real incidents.
  • Feed learnings from investigations back into detection logic and response workflows.
  • Maintain documentation, playbooks, and runbooks for detections and automations.
  • Contribute to purple-team activities and detection gap analysis.
  • Core Technical Skills
  • Proven experience in detection engineering, security operations engineering, or security automation roles.
  • Hands-on experience with Rapid7, SentinelOne, and/or CrowdStrike in detection or response contexts.
  • Strong experience building automation using Azure Logic Apps.
  • Proficiency integrating systems using REST APIs, JSON payloads, authentication, and pagination.
  • Solid understanding of endpoint security, vulnerability management, and attacker tradecraft.
  • Deep familiarity with MITRE ATT&CK and behaviour-based detection methodologies.

  • Engineering & Operational Skills
  • Strong scripting or engineering background (e.g. Python, PowerShell).
  • Experience working with structured data, event pipelines, and telemetry correlation.
  • Understanding of alert lifecycle management and incident response workflows.
  • Ability to design automation that is safe, resilient, and auditable.

  • Preferred
  • Experience correlating endpoint, vulnerability, and asset data for risk-based detection.
  • Familiarity with SOAR design patterns and automation governance.
  • Exposure to cloud security telemetry and identity-based attack detection.
  • Experience operating in large-scale or regulated environments.
  • Knowledge of CI/CD or infrastructure-as-code approaches for security tooling.

    • Listing Details

    Posted
    October 16, 2025
    First seen
    March 25, 2026
    Last seen
    April 22, 2026

    Posting Health

    Days active
    28
    Repost count
    0
    Trust Level
    23%
    Scored at
    April 22, 2026

    Signal breakdown

    freshnesssource trustcontent trustemployer trust
    Apply for this position
    Ion
    Ion
    lever
    Employees
    5
    Founded
    2025
    Domain
    ionconsumables.com
    Jobs
    View 156 jobs
    View company profile

    4 other jobs at Ion

    View all →

    Explore open roles at Ion.

    Ion
    Senior Product UX Consultant, Mexico City
    Full-time    Ion
    Mobile Junior Developer
    Contractor    Ion
    Desktop and Security Administrator
    Full-time    Ion
    Tech Lead, Mexico City
    Full-time (hybrid)

    Similar Security Engineer jobs

    View all →
    S
    Springhealth66
    Staff AI Security Engineer
    $239k–$270k/yr
    YoucomYoucom
    Senior Security Engineer
    USD 180000-235000
    XaiXai
    Security Engineer - Detection & Response
    $180k–$440k/yr
    XaiXai
    Security Engineer - Azure Government
    XaiXai
    Security Engineer - Platform Security
    $180k–$440k/yr
    T
    Talkdesk2
    Security Engineer (Pentesting, Incident Response & Investigations)

    Browse Similar Jobs

    Application Security Engineer46Product Security Engineer41Cloud Security Engineer40DevSecOps Engineer36Threat Intelligence Analyst26Security Analyst23Security Operations Engineer22Offensive Security Engineer14Security Architect12Blue Team Engineer11Third-Party Risk Analyst10Digital Forensics Analyst10Network Security Engineer10Compliance Security Analyst9Governance Risk and Compliance Manager8Security Consultant8Grc Analyst8Identity and Access Management Engineer7Identity Security Engineer7Soc Engineer6
    Newsletter

    Stay ahead of the market

    Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.

    A
    B
    C
    D
    Join 12,000+ marketers

    No spam. Unsubscribe at any time.

    IonSecurity Engineer - Detection Engineering & Automation
    Apply Now