About the Role
We are looking for an 7- 10 years expereicned Security Engineer to join our Information Security function, operating as a core contributor within the Security Operations Centre (SOC) and cloud security engineering practice. This is a technically deep, hands-on role centred on Palo Alto Cortex XSIAM/XSOAR as our primary SIEM and SOAR platform, alongside Crowd Strike Falcon endpoint protection, multi-cloud logging ingestion, and identity integration across our Microsoft estate
The successful candidate will design, build and maintain the integrations that feed security telemetry into our detection and response capability—spanning AWS, GCP and Azure—while working collaboratively with IT to ensure the health and integrity of our Entra ID and Microsoft 365 connectors. You will operate within an setting that places equal weight on engineering rigour and security assurance, contributing to playbook development, alert tuning and the continuous improvement of our detection postur
e.
SIEM & SOAR Engineering (Palo Alto Corte
x):
• Design,
deploy and maintain log source integrations into Palo Alto Cortex XSIAM / XSOAR, ensuring normalisation, parsing accuracy and data quality across all connected sour
ces.• Develop, test and continuously improve SOAR playbooks for automated triage, enrichment and response across key incident ty
pes.• Own SIEM content including detection rules, correlation policies, dashboards and alert thresholds; perform ongoing tuning to reduce false-positive volu
mes.• Maintain platform health including connector status monitoring, API rate-limit management and capacity planning for log ingestion pipeli
nes.• Produce and maintain engineering documentation including integration runbooks, playbook specifications and change records in accordance with CAB pol
icy.
Endpoint Security Engineering (Crowd Strike Fal
con):
• Administer and engineer the Crowd Strike Falcon platform, including sensor deployment management, policy configuration and resp