AVP Cyber Security Engineer

Reference: 51313A leading international financial services organisation is seeking a Cyber Security Engineer to join its Proactive Security function. This role will focus on strengthening security capabilities through threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment. Permanent (70k - 80k)London / HybridMust have UK citizenship / ILR Visa / EU settled statusKey ResponsibilitiesThreat Modelling & Security EngineeringDevelop and maintain threat models for business-critical systems and services. Assess security risks and recommend controls during project design and implementation.

Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation.

Lead security tooling integrations and orchestration initiatives.

Develop and enhance SOAR capabilities.

Support identity-based threat detection, privileged access management, and session monitoring. SIEM Engineering & Security MonitoringDesign, implement, and maintain SIEM workspaces, data connectors, analytics rules, dashboards, and playbooks.

Develop advanced threat hunting queries and investigation workflows.

Onboard and optimise critical security log sources across on-premise and cloud environments.

Improve detection accuracy through continuous tuning and use case development.

Troubleshoot and resolve log ingestion and data quality issues.

Threat Detection & Incident ResponseDesign and deploy advanced detection use cases covering modern attack techniques.

Translate threat intelligence into actionable monitoring and detection capabilities.

Perform proactive threat hunting activities.

Contribute to security playbooks, response procedures, and operational improvements.

Security AdvisoryProvide expert guidance on application and infrastructure security.

Support the evaluation and proof of concept of emerging security technologies. Act as a subject matter expert across cyber security initiatives.

Required

Experience5+ years' experience in Security Engineering, Security Operations, Security Automation, or a related cyber security discipline.

Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering.

Experience developing and supporting SOAR capabilities.

Solid understanding of Active Directory security and Windows event logging.

Proficiency with PowerShell and/or Python scripting.

Good understanding of networking concepts including firewalls, VPNs, proxies, and security protocols.

Experience securing Azure, AWS, or GCP environments.

Knowledge of cyber security frameworks such as NIST, MITRE ATT&CK, and Cyber Kill Chain.

Excellent communication and stakeholder management skills. What You'll GainOpportunity to work in a mature and forward-thinking cyber security environment. Exposure to enterprise-scale security technologies and cloud platforms.

Ownership of detection engineering, threat hunting, and security automation initiatives.

Collaboration with experienced cyber security professionals across infrastructure, cloud, and security operations teams. Sounds interesting? Apply to find out more!