Top Cybersecurity Jobs in London

Own the global vision and multi-year strategy for CrowdStrike’s Next-Gen SIEM platform, focusing on scalable data ingestion, third-party connectors, integrations, log management, and security analytics. Lead cross-functional architecture alignment, define operational SLOs, translate customer and partner needs into product requirements, enable ecosystem integrations, mentor product managers and engineers, and drive innovation across distributed global teams.

Lead backend engineering for CrowdStrike’s Cloud Detection Engine, designing and scaling resilient services that process internet-scale data streams and support real-time threat detection. Build cloud-based distributed systems, data pipelines, detection logic, and platform capabilities across Falcon products. Collaborate across teams, improve architecture and performance, mentor engineers, and own systems from design through production using modern engineering practices and AI-enabled workflows.

Design and implement a scalable cloud detection engine that processes billions of events across multi-cloud environments. Build custom query languages, event orchestration and correlation systems, collaborate with security researchers to convert detections into production features, lead backend engineering, mentor teammates, and improve architecture, performance, and reliability using Go, cloud platforms, Kafka, Cassandra, Docker and related technologies.

Build and maintain ultra-high-scale data platforms and pipelines (petabyte scale). Write fault-tolerant Java/Spark code, design low-latency query capabilities, improve performance and stability, participate in technical reviews, and enable customers/internal teams to query and extract analytics from event data.

Build and scale cloud-native backend services for a global detection-engine platform. Design high-performance, resilient distributed systems, collaborate across teams, mentor engineers, and drive testing, CI, and AI-enhanced detection workflows at internet scale.

Deliver professional services for Falcon Next-Gen SIEM, helping customers implement log management, XDR, and SOAR capabilities. Provide technical guidance, integrations, knowledge transfer, documentation, and trusted advisory support. Collaborate with engineering and product teams to communicate customer requirements and influence product improvements. The role requires SIEM and SOAR experience, cloud platform knowledge, IT security expertise, scripting and automation skills, AI platform experience, and strong communication abilities.

Monitor and analyze security alerts, handle incidents across Windows, Mac, and Linux, perform malware analysis, and remotely remediate malicious activity. The role also develops detection and response processes, communicates findings and recommendations to customers, contributes to security procedures, and supports thought leadership through public content and speaking engagements.

Provide incident handling, malware analysis, forensic investigation, remediation, detection engineering, and security automation across Windows, macOS, and Linux environments. Configure and optimize CrowdStrike Falcon modules, develop security content and automations, advise customers during incidents, produce technical findings, and support platform onboarding. The role also involves customer communication, thought leadership, operational improvement, and mentoring.

Analyze adversary activity and communicate findings to customers. Conduct threat hunting and intrusion analysis using endpoint telemetry, network and host-based analysis, digital forensics, and cyber threat intelligence. Research nation-state adversaries, improve detection capabilities, and support security investigations. The role also involves customer communication, tool development, cross-functional collaboration, and using AI technologies to improve workflows and decision-making.

Monitor and analyze security alerts, investigate and respond to incidents across Windows, macOS, and Linux, perform malware and forensic analysis, remotely remediate threats, and improve detection and response processes. Serve as a technical escalation point, mentor junior analysts, oversee quality assurance, manage internal programs or teams, communicate findings to customers, and contribute thought leadership through public speaking and content.