Detection Engineer

About Sekuro

We're a founder-led global consulting company in the cybersecurity market, operating across Australia, Asia, and the UK. Our reputation is built on breaking away from traditional consulting models, embracing a direct and fresh approach that puts clients at the centre of everything we do. Our mission is simple: to be our clients' most trusted security partner by delivering impactful outcomes that build resilience, enable innovation, and improve competitiveness.

Our vision is to be the world's most trusted security partner, enabling organisations to protect today and prepare for tomorrow. We exist to secure organisations, empowering them to thrive in a digital world.

We live by our values: we are brave, we raise the bar, we tell it how it is, we own the outcome, and we care for all.

The Role

We're looking for a Security Engineer to join our team remotely from anywhere in the UK. You'll be working within Sekuro's Security Engineering team, a group of technical practitioners who've built and run robust security services for corporate enterprises across Australia, and now beyond.

This is a hands-on role where your engineering, development, and scripting skills will be put to real use. You'll be designing, building, and maintaining the security technology platforms and services that underpin everything our Managed Security function delivers.

What You'll Do

• You'll design detection rules, correlation searches, and analytics within our SOC environment to identify and mitigate security threats. Working with security analysts and incident responders, you'll build detection solutions that actually work for our clients' needs.
• Using the MITRE ATT&CK framework and industry best practices, you'll develop comprehensive detection strategies. You'll conduct threat research to stay current with the latest vulnerabilities and attack techniques, ensuring our detection capabilities remain effective.
• You'll document your findings in clear security advisories and reports, communicating complex concepts to everyone from technical teams to management. Collaborating with the security operations team, you'll help analyse incidents and continuously improve our response processes.

What You'll Need

• Strong expertise in Splunk Enterprise and Enterprise Security, including the ability to package add-ons and align custom log sources with the Splunk CIM. Solid knowledge of threat research, attack techniques, and indicators of compromise, plus familiarity with the MITRE ATT&CK framework.
• Great analytical and problem-solving skills to identify patterns and anomalies in large datasets. Excellent communication skills to explain technical concepts to both technical and non-technical audiences. The ability to work collaboratively and effectively with cross-functional teams.
• Relevant certifications like Splunk Certified Architect or Splunk Enterprise Security Certified Admin are a bonus but not essential.
• Experience with other SIEM products like Microsoft Sentinel or Exabeam, and familiarity with the SPEED use case framework would be great additions.

Please note: Our recruiter Tim Smith is based in Sydney, Australia and will be calling on WhatsApp from a +61 number.