> Markdown version of [/jobs/ext/2796054-senior-cyber-security-engineer-edr](https://www.wearedevelopers.com/jobs/ext/2796054-senior-cyber-security-engineer-edr). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cyber Security Engineer (EDR) - **Company:** Sanderson Recruitment Plc - **Location:** London, UK - **Experience:** Expert - **Salary:** £55,000.0 - £85,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Amazon S3, Microsoft Azure, Cyber Security, Data Deduplication, Data Reduction, Intrusion Detection and Prevention, Key Management, Network Segmentation, Zero Trust Network Access, Security Information and Event Management, Cloud Platform System, Facebook Flow, Mitre Att&ck, Splunk, Data Pipelines - **Published:** September 8, 2026 - **Apply:** https://www.totaljobs.com/job/senior-cyber-security-engineer/sanderson-government-and-defence-job107949045 ## About the Role * Strong hands-on experience within Security Operations, Detection Engineering, Threat Detection, or Security Monitoring. * Experience securing cloud environments across AWS, Azure, or GCP. * Expertise in one or more of the following: + Splunk and SPL + YARA rule development + EDR detection engineering + SIEM content development and tuning * Experience mapping detections to the MITRE ATT&CK framework. * Strong understanding of modern security principles including Zero Trust, identity-first security, secrets management, and network segmentation. Desirable Experience * Experience with Cribl and security data pipeline management. * Knowledge of Kinesis, Amazon S3, Amazon Security Lake, or similar technologies. * Understanding of OCSF and security data normalisation. * Experience working within government, defence, highly regulated industries, or the wider public sector. * Experience mentoring or leading engineers within a SOC or cyber security function. ## Description We're looking for an experienced Senior Security Engineer - Monitoring & Detection to play a key role in securing large-scale, cloud-based environments supporting critical public sector and government services. This is a hands-on engineering role focused on threat detection, SIEM engineering, security monitoring, log management, and SOC optimisation. You'll design and enhance detection capabilities, improve security visibility, and ensure organisations can rapidly identify and respond to emerging cyber threats. Working alongside SOC analysts, engineers, architects, and stakeholders, you'll help build modern security monitoring capabilities that improve resilience while enabling faster, risk-based decision-making. What You'll Be Doing Detection Engineering & Threat Monitoring * Develop, tune, and maintain detection rules across SIEM, EDR, and threat detection platforms. * Create and optimise detection logic using technologies such as Splunk and endpoint security solutions. * Map detections against the MITRE ATT&CK framework to ensure comprehensive threat coverage. * Continuously improve detection quality by analysing alert fidelity, false positives, and operational effectiveness. * Validate detections through testing, simulation exercises, and red-team scenarios. Security Data & Log Engineering * Manage and optimise log ingestion pipelines to ensure high-quality, actionable security data. * Configure routing, filtering, enrichment, and normalisation of security telemetry. * Improve data efficiency through deduplication, data reduction, and flow summarisation techniques. * Support cloud-native data streaming and storage solutions. * Ensure security data aligns with industry standards such as OCSF while maintaining strong encryption and access controls. Stakeholder Engagement * Translate complex technical risks into clear business-focused recommendations. * Collaborate with technical and non-technical stakeholders to improve security outcomes. * Act as a trusted technical advisor across engineering and security teams. * Mentor junior engineers and contribute to the growth of the wider cyber security function. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [WeAreDevelopers LIVE - CSS is DOOMed](https://www.wearedevelopers.com/videos/1838-wearedevelopers-live-css-is-doomed) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Hate organising your photos? Try it with 5 Terabytes](https://www.wearedevelopers.com/videos/79-hate-organising-your-photos-try-it-with-5-terabytes) - [Building Systems that Last](https://www.wearedevelopers.com/videos/1389-building-systems-that-last) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs)