Principal Security
Hace 6 días
España
Integrity360
Jornada completa
Gratis con email o Google
Guarda esta oferta y sigue tu búsqueda
Crea una cuenta gratis para guardar empleos, crear alertas y volver a esta oferta desde tu panel.
Gratis con email o Google
Al continuar, aceptas nuestros Términos & Política de Privacidad.
Principal Security & Detection EngineerTitle:Principal Security & Detection EngineerJob type: Full-Time PermanentWorking arrangement: 3 days a week onsite/hybrid.
Salary:
Negotiable / DOEAbout UsIntegrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.
With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over ***
* mid-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.
If you're ready to take your cyber security career to the next level, we'd love to hear from you.
Job Role / ResponsibilitiesAs a Principal Security & Detection Engineer, you will provide senior technical leadership across our Security Operations capability, with a particular focus on detection engineering, security research, SOC automation, threat hunting, and the continued development of our fraud monitoring platform.
You will operate as a senior member of the technical leadership team, helping define the direction of our detection and research capabilities while continuing to work hands-on across security engineering, software development, research and automation.
The ideal candidate is equally comfortable investigating how a new attack technique works, reproducing an exploit in a controlled environment, writing software to automate a security process, developing a new detection, and turning that work into a repeatable capability for the wider SOC.
This is not a traditional SOC monitoring or incident-response role.
Key Responsibilities
- Detection Engineering & Threat Hunting
- Develop and maintain security detections across the technology stack.
- Fraud Monitoring Platform Development
- Lead the development of the fraud and abuse monitoring platform.
- Security Automation & SOAR
- Design and develop automation to improve SOC efficiency.
- Security Research & Development
- Conduct independent research into emerging threats, vulnerabilities, and attack techniques.
- Reproduce exploits in a controlled environment to validate findings.
Technical Leadership & Autonomy
- Provide technical leadership and establish standards for engineering activities.
- Conduct quality reviews and act as a senior technical decision-maker.
- Operate with a high degree of autonomy, owning projects from concept to implementation.
Technical EnvironmentThe successful candidate should be comfortable working across a broad security and software engineering environment, including:
- SIEM
- EDR/XDR technologies
- SOAR and security automation
- Threat hunting
- Vulnerability research and exploitation
- Network security and networking technologies
- Python
- SQL
- APIs and system integrationsRequired Experience & Skills
- Minimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focus.
- Demonstrated experience developing software, automation or security tooling.
- Strong Python development capability.
- Strong understanding of security monitoring and detection engineering.
- Experience working with SIEM, security analytics and large-scale security telemetry.
- Experience designing and developing integrations between security platforms and other systems.
- Strong understanding of networking and network security principles.
- Ability to translate security research into practical detections, automation or engineering solutions.
- Ability to work independently with minimal supervision.
- Ability to manage multiple technical projects and prioritise work effectively.
Candidates who can demonstrate strong practical cybersecurity or software-development experience without a traditional academic background will be considered.
- Demonstrated technical ability, initiative, engineering capability and practical experience are more important. #
Salary:
Negotiable / DOEAbout UsIntegrity360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.
With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity360 supports over ***
* mid-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.
If you're ready to take your cyber security career to the next level, we'd love to hear from you.
Job Role / ResponsibilitiesAs a Principal Security & Detection Engineer, you will provide senior technical leadership across our Security Operations capability, with a particular focus on detection engineering, security research, SOC automation, threat hunting, and the continued development of our fraud monitoring platform.
You will operate as a senior member of the technical leadership team, helping define the direction of our detection and research capabilities while continuing to work hands-on across security engineering, software development, research and automation.
The ideal candidate is equally comfortable investigating how a new attack technique works, reproducing an exploit in a controlled environment, writing software to automate a security process, developing a new detection, and turning that work into a repeatable capability for the wider SOC.
This is not a traditional SOC monitoring or incident-response role.
Key Responsibilities
- Detection Engineering & Threat Hunting
- Develop and maintain security detections across the technology stack.
- Fraud Monitoring Platform Development
- Lead the development of the fraud and abuse monitoring platform.
- Security Automation & SOAR
- Design and develop automation to improve SOC efficiency.
- Security Research & Development
- Conduct independent research into emerging threats, vulnerabilities, and attack techniques.
- Reproduce exploits in a controlled environment to validate findings.
Technical Leadership & Autonomy
- Provide technical leadership and establish standards for engineering activities.
- Conduct quality reviews and act as a senior technical decision-maker.
- Operate with a high degree of autonomy, owning projects from concept to implementation.
Technical EnvironmentThe successful candidate should be comfortable working across a broad security and software engineering environment, including:
- SIEM
- EDR/XDR technologies
- SOAR and security automation
- Threat hunting
- Vulnerability research and exploitation
- Network security and networking technologies
- Python
- SQL
- APIs and system integrationsRequired Experience & Skills
- Minimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focus.
- Demonstrated experience developing software, automation or security tooling.
- Strong Python development capability.
- Strong understanding of security monitoring and detection engineering.
- Experience working with SIEM, security analytics and large-scale security telemetry.
- Experience designing and developing integrations between security platforms and other systems.
- Strong understanding of networking and network security principles.
- Ability to translate security research into practical detections, automation or engineering solutions.
- Ability to work independently with minimal supervision.
- Ability to manage multiple technical projects and prioritise work effectively.
Candidates who can demonstrate strong practical cybersecurity or software-development experience without a traditional academic background will be considered.
- Demonstrated technical ability, initiative, engineering capability and practical experience are more important. #