About Bridewell

One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world's most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.
Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.

Who are we looking for?

We are seeking a highly skilled and experienced Senior Detection Engineer to expand our Managed Security Service Provider (MSSP) team. You will be responsible for developing and maturing detection coverage across our MSS customers (Splunk, Azure Sentinel, Chronicle SIEM).
For this particular role we're primarily looking for someone with Splunk detection engineering experience.

What you'll be doing

This role sits within our detection engineering team who work with a variety of clients across a range of industries to constantly mature and maintain detection content.

• Detection Maintenance - Identity and implement fixes to detection content throughout its lifecycle to combat alert fatigue and improve fidelity of signals triaged by the SOC team.
• Detection Creation - Creation of new detection content from a mixture of customer requests, CTI reports, research and collaboration with Bridewell's offensive teams.
• Innovation - Creation of requirements and implementation of quality of life features for the teams internal tooling (e.g. validation pipelines, schema definitions, helper tools).
• CI/CD - Collaborating with engineering teams to ensure that detection content is managed in a scalable and repeatable way.
• Attacker Emulation - Replicating attacker techniques to prove detection rules work and assumptions are valid.
• Client Engagement - Work closely with clients to understand their security needs, provide expert advice, and ensure their satisfaction with our services.
• Technical Leadership - Provide technical guidance and mentorship to more junior members of the team and share knowledge into wider MSS teams.

What we're looking for
You'll have experience of:

• 3+ years of experience in Security Operations
• Writing scalable detection content (KQL/SPL/YARA-L)
• Strong knowledge of scripting languages such as Python, Go or Shell
• Knowledge of Infrastructure as Code (IaC) tools e.g. bicep
• Experience with cloud platforms (AWS, Azure, GCP).
• Familiarity with CI/CD tools (Jenkins, GitLab, CircleCI, Azure DevOps).
• Ability to explain complex security topics in an understandable manner.
• Strong problem-solving skills and the ability to work under pressure.
• Knowledge of networking, firewalls, VPNs, IDS/IPS, and other security technologies, including on-premises infrastructure, and how these integrate into SOC monitoring.
• Expertise in security information and event management (SIEM) systems, preferably Splunk / Azure sentinel.

It's a benefit if:

• You have experience in similar DE roles in a MSSP setting
• You have hands on experience in adversary emulation or similar.

What's in it for you?

Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn't end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:

• 25 Days Holiday - Plus buy and sell options 
• Flexible Working (around core office hours) 
• Performance Incentive Bonus 
• Company Pension 
• Employee Shareholder Scheme 
• Personal Day & Birthday Off - After 1 year of service 
• Family Leave - After 1 year of service 
• Enhanced Maternity based on length of service 
• Dedicated Training Budget 
• Life Assurance 
• Electric Vehicle Scheme & Cycle to Work Scheme
• Private Healthcare (incl. Gym discounts and vison care)

Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion.

Note: To be eligible for this job you must either hold SC or be eligible and willing to go through security clearance.

Bridewell values diversity in the workplace and is a fair and equal opportunity employer. We are committed to creating an equal and inclusive working environment, with the aim that our employees will be truly representative of all sections of society and each person feels respected and able to give their best.