Specialist Detection Engineer

NegotiableBristol, England

Permanent

Our client, operating within the banking and retail sectors, is seeking a Principal EDR Manager to provide technical leadership across its cyber defence capabilities. This permanent role will focus on the engineering, optimisation and strategic development of Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) platforms, helping to strengthen security visibility, detection and incident response across enterprise, cloud and hybrid environments. Key Responsibilities:Act as the technical subject matter expert for Microsoft Defender XDR and CrowdStrike FalconDesign, implement, maintain and optimise enterprise EDR and XDR capabilitiesDevelop, tune and maintain high-fidelity detection content across EDR, XDR and SIEM platforms, including Microsoft SentinelSupport SOAR integration and automation to improve incident response and security operationsConduct advanced threat hunting and investigations using KQL and Defender Advanced HuntingAlign detection logic with the MITRE ATT&CK framework, threat intelligence and emerging attacker behaviourLead platform configuration, upgrades, policy development, health monitoring and performance improvementsProvide technical leadership for security platform architecture, integrations, standards and engineering best practiceJob Requirements:Significant experience in EDR, XDR, security engineering, security operations or cyber defenceStrong expertise in Microsoft Defender XDR and CrowdStrike FalconExperience developing detection content and managing security monitoring across SIEM technologiesPractical understanding of SOAR tools, incident response automation and security tool integrationStrong knowledge of threat hunting, incident investigation and detection engineering methodologiesProficiency in KQL, Microsoft Sentinel and enterprise security analyticsUnderstanding of MITRE ATT&CK, attacker tactics, techniques and proceduresExperience with Detection-as-Code, CI/CD practices, technical documentation and platform governanceLeadership and Collaboration:The Principal EDR Manager will work closely with the Cyber Defence Centre, Security Operations, Incident Response, Threat Intelligence, Vulnerability Management and Security Architecture teams. The role will provide mentoring to engineers, influence technical strategy, report on detection coverage and platform effectiveness, and present recommendations to senior stakeholders. Desirable Qualifications:Microsoft Certified: Security Engineer Associate or Security Operations Analyst AssociateCrowdStrike Falcon Administrator CertificationCISSP or relevant GIAC certificationWhat is Offered:Permanent opportunity within a major banking and retail environmentOpportunity to shape enterprise EDR, XDR, SIEM and SOAR capabilitiesTechnical leadership across a broad and evolving cyber security landscapeProfessional development, knowledge-sharing and mentoring opportunitiesCollaborative work with specialist cyber security and engineering teamsIf you are an experienced cyber security engineer with strong EDR, XDR, SIEM and SOAR expertise, this is an opportunity to lead the evolution of enterprise endpoint security. Apply now to be considered.

Report this job