Senior Cyber Security Engineer

About the role

The Senior Cyber Security Engineer joins BoyleSports' Cyber Defence team to design, build and operate detection and response capabilities that protect the business from active threats. Working closely with the Head of Cybersecurity, you will act as the senior hands‑on defender, writing detections, hunting threats, investigating alerts and standing on the bridge during incidents.

Key responsibilities

• Design, write, test and tune detections across Cortex XDR/XSIAM, AWS CloudTrail, GuardDuty, EKS audit logs, Entra ID, on‑prem AD and other telemetry sources.
• Treat detections as code: version‑control rules, peer‑review changes, write tests and map coverage to MITRE ATT&CK.
• Onboard and parse new log sources, collaborating with platform and application teams.
• Run structured threat hunts based on threat intelligence, recent incidents and gambling‑specific attack patterns.
• Lead deep‑dive investigations of alerts escalated from the Palo Alto MSSP, documenting findings for future analysts.
• Participate in P1 and P2 incident response, driving containment, eradication and regulator‑required evidence collection.
• Build and maintain SOAR playbooks, automating triage, enrichment, containment and notification.
• Integrate detection and response tooling with ticketing, chat, identity and cloud control planes using clean, supportable code.
• Serve as the primary technical liaison to the Palo Alto managed SOC, reviewing detections and providing feedback.

Required profile

• Senior‑level hands‑on defender with proven experience in detection engineering, threat hunting and incident response.
• Strong ability to work independently and collaboratively with platform, infrastructure and product engineering teams.
• Experience operating in an on‑call rotation and acting as Incident Commander when needed.
• Excellent written documentation skills to ensure investigations are repeatable and auditable.

Required skills

• Cortex XDR / XSIAM
• AWS CloudTrail, GuardDuty, EKS audit logs
• Microsoft Entra ID and on‑premises Active Directory
• MITRE ATT&CK framework
• Palo Alto Networks Managed SOC (MSSP)
• SOAR playbook development (e.g., Cortex XSOAR)
• Version control systems (e.g., Git)