{"id":4095976,"url":"https://alion.io/job/matchtech-specialist-detection-engineer","title":"Specialist Detection Engineer","company":{"id":2073484,"name":"Matchtech","domain":"matchtech.com","url":"https://alion.io/company/matchtech-com","size_band":"201-500","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"A","score":100,"open_postings":39,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":57,"computed_at":"2026-11-11T05:49:22Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bristol, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":75000,"max":75000,"currency":"GBP","period":"year","gross":null,"usd_annual":99629},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-11-11T21:05:53Z","employer_posted_date":"2026-11-11","last_verified_at":"2026-11-11T21:05:53Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Our client, operating within the banking and retail sectors, is seeking a Principal EDR Manager to provide technical leadership across its cyber defence capabilities. This permanent role will focus on the engineering, optimisation and strategic development of Endpoint Detection and Response (EDR) and Extended Detection and Response (XDR) platforms, helping to strengthen security visibility, detection and incident response across enterprise, cloud and hybrid environments.\nKey Responsibilities:\nAct as the technical subject matter expert for Microsoft Defender XDR and CrowdStrike Falcon\nDesign, implement, maintain and optimise enterprise EDR and XDR capabilities\nDevelop, tune and maintain high-fidelity detection content across EDR, XDR and SIEM platforms, including Microsoft Sentinel\nSupport SOAR integration and automation to improve incident response and security operations\nConduct advanced threat hunting and investigations using KQL and Defender Advanced Hunting\nAlign detection logic with the MITRE ATT&CK framework, threat intelligence and emerging attacker behaviour\nLead platform configuration, upgrades, policy development, health monitoring and performance improvements\nProvide technical leadership for security platform architecture, integrations, standards and engineering best practice\nJob Requirements:\nSignificant experience in EDR, XDR, security engineering, security operations or cyber defence\nStrong expertise in Microsoft Defender XDR and CrowdStrike Falcon\nExperience developing detection content and managing security monitoring across SIEM technologies\nPractical understanding of SOAR tools, incident response automation and security tool integration\nStrong knowledge of threat hunting, incident investigation and detection engineering methodologies\nProficiency in KQL, Microsoft Sentinel and enterprise security analytics\nUnderstanding of MITRE ATT&CK, attacker tactics, techniques and procedures\nExperience with Detection-as-Code, CI/CD practices, technical documentation and platform governance\nLeadership and Collaboration:\nThe Principal EDR Manager will work closely with the Cyber Defence Centre, Security Operations, Incident Response, Threat Intelligence, Vulnerability Management and Security Architecture teams. The role will provide mentoring to engineers, influence technical strategy, report on detection coverage and platform effectiveness, and present recommendations to senior stakeholders.\nDesirable Qualifications:\nMicrosoft Certified: Security Engineer Associate or Security Operations Analyst Associate\nCrowdStrike Falcon Administrator Certification\nCISSP or relevant GIAC certification\nWhat is Offered:\nPermanent opportunity within a major banking and retail environment\nOpportunity to shape enterprise EDR, XDR, SIEM and SOAR capabilities\nTechnical leadership across a broad and evolving cyber security landscape\nProfessional development, knowledge-sharing and mentoring opportunities\nCollaborative work with specialist cyber security and engineering teams\nIf you are an experienced cyber security engineer with strong EDR, XDR, SIEM and SOAR expertise, this is an opportunity to lead the evolution of enterprise endpoint security. Apply now to be considered.","description_format":"text","description_chars":3213,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations"],"lifecycle":[{"event":"open","at":"2026-11-11T21:05:53Z"}],"visa":[{"country":"GB","licensed_sponsor":false,"adverts_offering_sponsorship_24m":3,"sanctioned_now":false,"evidence":"Offered visa sponsorship in 3 of its adverts here in 24 months","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":null,"cap_exempt":false,"checked_at":"2026-11-11T07:38:50+00:00","sources":["Alion: sponsorship offered in the employer's own job adverts (24 months)"],"filings_for_role_12m":0}],"liveness":{"score":52,"band":"ok","label":"Likely open","p_open":1,"p_active":0.516,"p_room":1,"age_days":0,"expected_fill_days":60,"reasons":["conf:3","agency","win:early","comp:brand"],"computed_at":"2026-11-12T00:36:38Z"},"pay":{"stated_usd_annual":99629,"is_top_pay":false},"html_url":"https://alion.io/job/matchtech-specialist-detection-engineer","json_url":"https://alion.io/job/matchtech-specialist-detection-engineer.json","meta":{"generated_at":"2026-11-12T00:36:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1410,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2073484},"rest":"https://alion.io/mcp/rest/get_company?id=2073484"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmatchtech-specialist-detection-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmatchtech-specialist-detection-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmatchtech-specialist-detection-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/matchtech-specialist-detection-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmatchtech-specialist-detection-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4095976}},{"tool":"search_jobs","arguments":{"company":"matchtech.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4095976},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}