Salary: £? - ? per year
Requirements: - Minimum of five years experience working in a dedicated Cyber Security Engineering or SOC Tier 3 environment.
- Extensive hands-on experience administering and supporting CrowdStrike Falcon, including Falcon Prevent, Falcon Insight, and Falcon Discover.
- Strong experience with Splunk Enterprise Security, including writing complex SPL queries, developing dashboards, alerts, reports, and managing security data.
- Experience supporting Security Operations Centres, incident response, endpoint detection and response, security monitoring, and threat hunting activities.
- Excellent understanding of network protocols, cyber attack methodologies, security monitoring techniques, and the MITRE ATT&CK Framework.
- Good knowledge of cloud security principles across Microsoft Azure and/or AWS environments.
- Strong analytical, troubleshooting, communication, and stakeholder management skills with the ability to work independently and manage multiple priorities.
- Experience performing vulnerability assessments using recognised vulnerability management tools.
- Exposure to penetration testing and web application security testing.
- Experience creating and maintaining cyber security policies, standards, and governance documentation.
- Professional cyber security certifications such as CompTIA Security+, Network+, CySA+, GSEC, CISSP, GCIH, GCIA, or CCSP.
- CrowdStrike certifications including CCFA, CCFR, or CCSE.
- Splunk Certified Cybersecurity Defense Engineer certification
Responsibilities: - Lead the deployment, configuration, administration, and ongoing optimisation of the CrowdStrike Falcon platform, ensuring endpoint security policies are effectively implemented and maintained.
- Work closely with the outsourced Security Operations Centre to develop and enhance Splunk dashboards, alerts, data models, and monitoring capabilities, enabling the identification and investigation of sophisticated cyber threats.
- Act as the senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation.
- Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational efficiency, and accelerate incident response.
- Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection.
- Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments.
- Develop and maintain cyber security policies, standards, and technical documentation to support governance and operational best practice.
- Provide technical guidance, mentoring, and knowledge transfer to existing cyber security team members, strengthening internal capability across CrowdStrike, Splunk, and security operations.
- Collaborate with internal stakeholders and external partners to continuously improve cyber security monitoring, detection, and response capabilities.
- Maintain awareness of emerging cyber threats, vulnerabilities, and industry best practices to ensure security controls remain effective and up to date.
Technologies: - AWS
- Azure
- Cloud
- Support
- Network
- Security
- Splunk
- Web
More:
We are seeking an experienced Senior Cyber Security Engineer to join our Cyber Security team on an interim contract. This is a 6-month contract based in London, working hybrid/on-site as required, with a start date in March 2026 and an inside IR35 daily rate of up to £500 per day via umbrella. The role will provide senior technical expertise to support and optimise our outsourced Security Operations Centre (SOC), helping us maximise our investment in security technologies while strengthening our cyber defence capabilities. We are looking for someone with extensive hands-on experience with CrowdStrike Falcon and Splunk Enterprise Security, along with the ability to enhance security monitoring, improve incident response processes, support threat hunting activities, and mentor our internal team members.
last updated 35 week of 2026