Global Detection Engineering

Salary: £67,000 - 72,000 per year

Requirements:

• Experience in detection engineering across a range of technologies, including SIEM and EDR, and ideally NDR
• Experience working in a global firm and in a multicultural context
• Experience working in a complex international environment with a significant amount of change
• Excellent oral and written communication skills
• Ability to work with clients and colleagues to continuously improve the service we deliver
• Experience with and knowledge of applying data science within a cybersecurity context
• Inspiring leadership ability with the communication skills to work effectively at all levels and create an approachable, supportive environment
• Hands-on experience with technologies such as Sentinel, Defender for Endpoint, Carbon Black, and Splunk is desirable
• Experience with purple teaming and other adjacent cybersecurity practices that strengthen detection engineering is desirable
• Forensics and/or incident response experience is desirable

Responsibilities:

• Lead a global implementation team that builds, maintains, and continuously improves detection logic across a variety of MXDR technologies
• Contribute as part of the GMS DevSecOps leadership team to set the vision, direction, and feature set of our technology platforms
• Ensure our detection logic is a market differentiator, providing extensive, high-quality coverage for advanced cyber attacks
• Manage senior detection engineers who each lead detection engineers across specific technology sets such as EDR, NDR, and SIEM
• Work proactively with wider NCC teams to ensure relevant inputs are available to build strong detection logic and to support high-quality MXDR deployments
• Ensure solution architecture and implementation teams have the information they need to deploy MXDR systems with the best possible coverage
• Maintain transparency to clients about the detection coverage they receive
• Develop new ways of applying data science to our data sets to improve cyber attack detection, alert correlation, and SOC efficiency

Technologies:

• DevSecOps
• Support
• Splunk
• Security

More:

We lead a global team based across the UK, NL, AU, and PH, building custom detections and structural improvements for our MXDR services. Our focus is on market-leading detection coverage, high-fidelity detections, and low false positives for our clients. We collaborate closely across the GMS and NCC business, including teams such as TI, CERT, DFIR, RTO, solution architecture, and implementation, to continuously improve our service. We offer a high-performance culture supported by world-class well-being initiatives and benefits, including flexible working, 25 days of holiday plus bank holidays with the option to buy more, Medicash and critical illness cover, pension, life assurance, a share save scheme, volunteering programmes, a green car scheme, a cycle-to-work scheme, special leave for major life events, and generous family planning support. The role sits within our Cyber Services and Capabilities department and is offered as a full-time hybrid position.

last updated 34 week of 2026