James Knox
Senior Consultant
AVP Security Engineer
Greater London, South East, England
Apply by 13 Dec 2026
£80000 per annum
Job Ref.: BH-58516
Job Description
Location: London
Type: Permanent
Required Background
- 5+ years' experience in Security Engineering, Security Automation, Security Operations, or related Cyber Security roles
- Experience delivering and implementing enterprise security technologies and controls
- Strong understanding of cyber threat detection, incident response, and security monitoring practices
- Experience working with recognised cyber security frameworks including:
- NIST
- MITRE ATT&CK
- Cyber Kill Chain
- Experience working with infrastructure, cloud, and enterprise security environments
- Strong communication and stakeholder management skills
- SIEM implementation, configuration, and optimisation
- Security Orchestration, Automation and Response (SOAR)
- Threat Detection Engineering and Threat Hunting
- Security Monitoring and Incident Response
- Security Tooling Integration and Orchestration
- Threat Modelling and Risk Analysis
- Identity Threat Detection and Prevention
- Privileged Access Management (PAM)
- Key Management Systems (KMS)
- Endpoint Detection & Response (EDR)
- Security technologies including:
- SIEM
- EDR
- DLP
- Secure Email Gateways (SEG)
- Proxy Technologies
- Microsoft Sentinel or equivalent SIEM platforms
- PowerShell and Python scripting
- Windows Event Collection and Log Management
- Active Directory security
- Networking and Security Protocols:
- TCP/IP
- Firewalls
- VPNs
- Proxies
- Cloud Security:
- Azure
- AWS
- GCP
- Windows and Linux server administration
- Microsoft Security Certifications:
- AZ-500
- SC-200
- SC-900
- CompTIA Security+
- Experience designing and implementing automated remediation workflows
- Experience with Logic Apps, Function Apps, and security automation tooling
- Advanced threat hunting and custom detection engineering experience
- Experience evaluating and implementing new cyber security solutions
- Knowledge of configuration drift monitoring and security analytics
- Develop and maintain threat detection, monitoring, and response capabilities
- Design and implement SIEM and SOAR solutions
- Build security automation and orchestration workflows
- Conduct threat modelling and security risk assessments
- Develop and optimise threat detection use cases and monitoring controls
- Lead threat hunting activities and proactive threat identification
- Integrate security tooling across the technology estate
- Support incident response and security operations activities
- Advise on security controls across infrastructure, applications, and cloud environments
- Evaluate emerging threats and contribute to continuous improvement of security capabilities
By applying for this role, you consent to SGI contacting you by telephone regarding recruitment services, market updates, and relevant business opportunities
We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives.
Source Group International Ltd is acting as an Employment Business in relation to this vacancy