Detection and Response Engineer - UK
Core
Design and direct AI-assisted, agentic detection workflows to scale coverage for internet-scale vulnerabilities and synthesize exploitation signals into threat intelligence.
Role type
Senior Detection and Response Engineer (Cybersecurity)
Builds
Durable network and host-based detections, threat intelligence products, and AI-driven agentic workflows
Domain
Cybersecurity, Exploit Intelligence, Vulnerability Management
Deliverable
production ML models
Required skills
AI-assisted agentic workflow design, network signature authoring, Canary telemetry analysis, device fingerprinting, protocol analysis, DFIR, host-based analysis, CVE/NVD/KEV dataset knowledge, rapid vulnerability response, scripting
Preferred skills
Suricata/Snort/Zeek expertise, Nuclei template writing, streaming systems, real-time data processing
Technologies
Suricata, Snort, Zeek, Nuclei, AI/LLM workflows
Responsibilities
Design AI-assisted detection workflows, author network signatures, build detections from Canary telemetry, drive feedback loops for data collection, tune false positive/negative rates, respond to new vulnerabilities, collaborate with researchers
Seniority
Senior, hands-on IC
