Security Engineer (Detection & Response)

About the role

You will bring hands-on detection and response experience into Refractal's product. Working with software and research engineers, you will draw on your experience writing detection rules, using SIEMs and investigating threats to shape the product.

Responsibilities

• Translate detection and investigation workflows into product requirements.
• Use experience with detection rules and SIEMs to guide product design and integration priorities.
• Build realistic examples and test cases that capture attacker behaviour, benign activity and common sources of false positives.
• Evaluate product outputs for detection quality, useful context and the effort required for an analyst to reach a decision.
• Work with customers and colleagues to identify gaps, prioritise improvements and check that changes address practical security needs.

Required skills

• Detection rules
• SIEM
• Splunk
• Datadog
• Threat investigation
• Security telemetry

Nice to have

• Security product development
• Scripting
• AI security

Benefits

• Competitive equity
• Pension contribution
• Private medical cover
• Private dental cover
• Visa support
• Relocation support

About the Company

Refractal is an AI security company building the infrastructure organisations need to defend against autonomous AI threats. Founded on cybersecurity and AI expertise from MIT, Microsoft, NASA and the U.S. Navy, the company works with governments and organisations to detect AI-enabled threats.