AVP Cyber Security Engineer

Reference: 51313A leading international financial services organisation is seeking a Cyber Security Engineer to join its Proactive Security function. This role will focus on strengthening security capabilities through threat detection, security engineering, automation, and proactive defence initiatives across a complex enterprise environment.

Permanent (70k - 80k)
London / Hybrid Must have UK citizenship / ILR Visa / EU settled status

Key Responsibilities Threat Modelling & Security Engineering Develop and maintain threat models for business-critical systems and services.

Assess security risks and recommend controls during project design and implementation.

Build and maintain capabilities for proactive detection, configuration monitoring, and automated remediation.

Lead security tooling integrations and orchestration initiatives.

Develop and enhance SOAR capabilities.

Support identity-based threat detection, privileged access management, and session monitoring.

SIEM Engineering & Security Monitoring Design, implement, and maintain SIEM work spaces, data connectors, analytics rules, dashboards, and playbooks.

Develop advanced threat hunting queries and investigation workflows.

Onboard and optimise critical security log sources across on-premise and cloud environments.

Improve detection accuracy through continuous tuning and use case development.

Troubleshoot and resolve log ingestion and data quality issues.

Threat Detection & Incident Response Design and deploy advanced detection use cases covering modern attack techniques.

Translate threat intelligence into actionable monitoring and detection capabilities.

Perform proactive threat hunting activities.

Contribute to security playbooks, response procedures, and operational improvements.

Security Advisory Provide expert guidance on application and infrastructure security.

Support the evaluation and proof of concept of emerging security technologies.

Act as a subject matter expert across cyber security initiatives.

Required Experience5+ years' experience in Security Engineering, Security Operations, Security Automation, or a related cyber security discipline.

Strong hands-on experience with SIEM platforms, EDR solutions, and detection engineering.

Experience developing and supporting SOAR capabilities.

Solid understanding of Active Directory security and Windows event logging.

Proficiency with Power Shell and/or Python scripting.

Good understanding of networking concepts including firewalls, VPNs, proxies, and security protocols.

Experience securing Azure, AWS, or GCP environments.

Knowledge of cyber security frameworks such as NIST, MITRE ATT&CK, and Cyber Kill Chain.

Excellent communication and stakeholder management skills.

What You'll Gain Opportunity to work in a mature and forward-thinking cyber security environment.

Exposure to enterprise-scale security technologies and cloud platforms.

Ownership of detection engineering, threat hunting, and security automation initiatives.

Collaboration with experienced cyber security professionals across infrastructure, cloud, and security operations teams.

Sounds interesting? Apply to find out more!