Principal Security & Detection Engineer

Principal Security & Detection Engineer

Title:

Principal Security & Detection Engineer

Job type:
Full-Time Permanent

Working arrangement: 3 days a week onsite/hybrid.

Salary:
Negotiable / DOE

Integrity
360 is a leading independent cybersecurity and PCI specialist operating across Europe, Africa, the Caribbean, and North America. The company has office locations in Ireland, the UK, Bulgaria, Italy, Sweden, Spain, Lithuania, Ukraine, Africa, the Caribbean, and Canada, supported by seven Security Operations Centres (SOCs) located in Dublin, Sofia, Madrid, Stockholm, Rome, Johannesburg and Cape Town.

With over 780 employees, including more than 585 dedicated cybersecurity professionals, Integrity
360 delivers a full suite of professional, support, and managed security services. These span the complete cyber risk lifecycle, from identification and prevention to detection, response, and recovery. Integrity
360 supports over 3000 mid-market and enterprise organisations across sectors including financial services, insurance, government, healthcare, retail, telecommunications, and utilities.

At Integrity
360, people come first. We invest heavily in learning, development and progression, fostering a dynamic culture where innovation, collaboration and continuous growth are at the heart of what we do. If you're ready to take your cyber security career to the next level, we’d love to hear from you.

As a Principal Security & Detection Engineer, you will provide senior technical leadership across our Security Operations capability, with a particular focus on detection engineering, security research, SOC automation, threat hunting, and the continued development of our fraud monitoring platform.

This is a highly technical role for an individual who is comfortable operating with a high degree of autonomy and taking ownership of complex technical problems from concept through to implementation.

You will operate as a senior member of the technical leadership team, helping define the direction of our detection and research capabilities while continuing to work hands-on across security engineering, software development, research and automation.

The ideal candidate is equally comfortable investigating how a new attack technique works, reproducing an exploit in a controlled environment, writing software to automate a security process, developing a new detection, and turning that work into a repeatable capability for the wider SOC.

This is not a traditional SOC monitoring or incident-response role. The focus is on building and improving the technology, methodologies and intelligence that enable the SOC to operate more effectively.

• Detection Engineering & Threat Hunting
  • Develop and maintain security detections across the technology stack.
  • Execute hypothesis-driven threat hunts and translate attacker TTPs into practical detections.
  • Map capabilities to MITRE ATT&CK and identify coverage gaps.
• Fraud Monitoring Platform Development
  • Lead the development of the fraud and abuse monitoring platform.
  • Design analytics, detection logic, and integrations to identify abuse patterns within business applications.
• Security Automation & SOAR
  • Design and develop automation to improve SOC efficiency.
  • Build automated enrichment, investigation, and response workflows (SOAR playbooks).
• Security Research & Development
  • Conduct independent research into emerging threats, vulnerabilities, and attack techniques.
  • Reproduce exploits in a controlled environment to validate findings.

• Provide technical leadership and establish standards for engineering activities.
• Conduct quality reviews and act as a senior technical decision-maker.
• Operate with a high degree of autonomy, owning projects from concept to implementation.

The successful candidate should be comfortable working across a broad security and software engineering environment, including:

• SIEM
• EDR/XDR technologies
• SOAR and security automation
• Threat hunting
• Vulnerability research and exploitation
• Network security and networking technologies
• Python
• SQL
• APIs and system integrations

• Minimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focus.
• Demonstrated experience developing software, automation or security tooling.
• Strong Python development capability.
• Strong understanding of security monitoring and detection engineering.
• Experience working with SIEM,…