Security Engineer (Cyber Defence)

About the role

The Security Engineer in the Cyber Defence team is a senior, hands‑on defender who works directly with the Head of Cyber Security. You will build, tune and operate detection and response capabilities that protect BoyleSports against active threats across our online gambling platform.

Key responsibilities

• Design, write, test and tune detections across Cortex XDR/XSIAM, AWS CloudTrail, GuardDuty, EKS audit logs, Entra ID, on‑prem AD, endpoint, network and application logs.
• Run structured threat hunts based on threat intelligence, recent incidents and attacker tradecraft relevant to online gambling.
• Lead deep‑dive investigations on alerts escalated from the Palo Alto MSSP and document findings for future analysts.
• Stand on the incident bridge for P1 and P2 events, drive containment and eradication, and manage technical timelines and evidence for regulator reporting.
• Build and maintain SOAR playbooks, automating triage, enrichment, containment and notification workflows.
• Act as the primary technical interface with the Palo Alto managed SOC, reviewing detections and providing feedback.

Required profile

• Senior‑level security professional with extensive hands‑on experience in detection engineering, threat hunting and incident response.
• Proven ability to work under pressure on high‑severity incidents and to collaborate with platform, infrastructure and product engineering teams.
• Strong analytical mindset and excellent documentation skills to ensure knowledge transfer.

Required skills

• Cortex XDR / XSIAM
• AWS CloudTrail, GuardDuty, EKS audit logs
• Microsoft Entra ID and on‑premises Active Directory
• MITRE ATT&CK framework
• Palo Alto Managed SOC (MSSP) integration
• SOAR platform and playbook development