Senior Information Security Engineer

Senior Information Security Engineer (Detection & Incident Response)Location: Oxford, as little as 2 days on site per month.Role Type: Permanent, Full-timeThe Role & PartnershipMorgan McKinley has partnered on an exclusive basis with the cybersecurity leadership team at an innovative, FTSE-listed frontier biotechnology and life sciences pioneer headquartered in Oxfordshire. Their ground-breaking platform is transforming real-time scientific data analysis and genomic research worldwide.We are actively searching for a hands-on, technically proficient Senior Information Security Engineer to step into a pivotal role within their enterprise security operations team.In this role, you will take primary internal ownership of detection engineering, SIEM/SOAR playbooks, and L2/L3 incident response across a modern hybrid infrastructure. Crucially, the organisation works in close partnership with a market-leading 24/7 Managed SOC (MSOC) provider who handles baseline triage and overnight alert monitoring. This means no 24/7 shift rotations or graveyard hours, allowing you to focus entirely on advanced threat detection, engineering custom detection logic, and orchestrating incident response during core business hours.Key ResponsibilitiesDetection Engineering & Tuning: Develop, validate, and tune high-fidelity detection rules, correlation queries, and dashboards across SIEM and EDR platforms, explicitly mapping coverage against the MITRE ATT&CK framework.Incident Response & Playbooks: Lead L2/L3 security incident investigations from identification through to containment, eradication, and post-mortem reviews, continuously maturing automated response playbooks.MSOC Collaboration: Serve as the internal escalation point and technical liaison for their external 24/7 Managed SOC partner, streamlining alert handoffs and driving down false-positive rates.Security Stack Administration: Configure, optimize, and harden core defensive platforms across EDR, SIEM/SOAR, DLP, Email Security, and Secure Web Gateways (SWG).Infrastructure Hardening: Advise and collaborate with enterprise IT teams to design and enforce robust security configurations across cloud, identity, and endpoint environments.Candidate ProfileProven Blue Team Experience: Substantial hands-on experience in a Senior SOC Analyst (Tier 2/3), Detection Engineer, or Incident Response role within a complex hybrid enterprise environment.Platform & Tooling Depth: Strong direct experience managing and querying enterprise EDR (e.g., CrowdStrike Falcon, Defender for Endpoint) and SIEM/SOAR platforms.Framework Knowledge: Deep familiarity with the MITRE ATT&CK matrix and modern threat intelligence methodologies.Scripting Skills: Proficiency using Python, PowerShell, or Bash for security automation, data parsing, or playbook integration.Incident Ownership: Calm, analytical approach to live incidents with the communication skills required to articulate risk clearly to technical and non-technical stakeholders alike.Desirable CredentialsRecognized blue-team or offensive certifications: OSCP, OSDA, CRTO, CDSA, BTL1/2, GCIH, or GPEN.Vendor certifications such as CrowdStrike Falcon Administrator (CCFA/CCFH) or Microsoft SC-200.Previous exposure to working alongside an external MSSP / MSOC provider.Experience operating within ISO 27001-compliant enterprise environments.What’s on OfferAnnual Bonus: Up to 20% target performance bonusLong-Term Incentives: 4% LTIP equity participationLocation Flexibility: Modern facilities with genuine hybrid autonomy, ideally 1 day per week on-site, with full flexibility to attend just 2 days per month on-site for candidates based further afield in the UK.Full enterprise package including enhanced pension scheme, comprehensive private healthcare, and life assurance.For further details or a confidential discussion about the role and client, please apply directly or contact George Neville (georgeneville@morganmckinley.com) at Morgan McKinley.