[Remote] Security Engineer

Note: The job is a remote job and is open to candidates in USA. Beazley Security is a global cybersecurity firm committed to helping clients enable advanced cyber defenses that reduce risk with quantifiable results. The Security Engineer is responsible for the operational management, optimisation, and lifecycle maintenance of the company's core Endpoint Detection and Response (EDR) and Network Detection and Response (NDR) platforms, ensuring effective threat detection and response while collaborating closely with the SOC teams.

Responsibilities

• Act as the technical owner for SOC systems and operations, ensuring full operational coverage and integration across the enterprise estate
• Maintain the physical and virtual infrastructure (appliances, sensors, collectors), planning upgrades, hardware refreshes, and configuration changes as required
• Oversee policy, sensor deployment, and version control across all EDR/NDR agents and connectors
• Validate data flow and health between endpoints, appliances, and the central XDR platform leveraged by the SOC
• Coordinate with the SOC, vendors, and IT infrastructure teams to schedule upgrades, patching, and feature enablement
• Tune detection logic, behavioural models, and response policies to reduce false positives and improve threat visibility
• Implement target NDR model optimisation, device tagging, and subnet labelling enhancements to support faster investigations
• Maintain EDR platform configuration baselines and analytics dashboards
• Support integration and data quality within the Beazley Security XDR platform to ensure reliable event correlation
• Document all configuration changes, tuning decisions, and engineering work in line with IT Security change management processes
• Collaborate closely with the Beazley Security SOC, ensuring they have the right visibility, alert quality, and context to perform effective first-line detection and triage
• Serve as part of the escalation group for security cases from the centralized SOC, assisting with containment and isolation activities during incidents where necessary
• Provide subject-matter expertise on EDR and NDR telemetry sources during investigations and post-incident reviews
• Contribute to root-cause analysis and recommend platform-level improvements following any potential incidents
• Partner with the Threat Intelligence team and MDR organization to proactively hunt for malicious activity and validate emerging TTPs within Beazley’s environment
• Feed newly identified patterns back into SOC detection content and threat models
• Produce operational and executive reporting across all managed detection platforms
• Participate in recurring technical optimisation sessions and quarterly business reviews with vendors
• Track detection efficacy, platform uptime, and configuration drift metrics as part of the IT Security KPI set
• Continuously assess opportunities for automation, enrichment, and process improvement

Skills

• Minimum 3 years' experience in security operations, cyber engineering, or platform management
• Hands-on experience administering and optimising leading NDR and EDR platforms
• Strong understanding of endpoint telemetry, network analytics, and SOC workflows
• Experience planning and performing platform upgrades, integrations, and lifecycle management
• Familiarity with MITRE ATT&CK and threat-hunting principles
• Ability to collaborate effectively with SOC analysts, infrastructure teams, and vendors
• Excellent documentation, analytical, and communication skills
• Experience working within hybrid SOC models (internal + managed service)
• Exposure to Identity Threat Detection & Response (ITDR) solutions
• Certifications such as CySA+, GCIA, or equivalent
• Scripting or query language capability (SQL, PowerShell, Python)

Benefits

• Flexible working arrangements.
• Generous leave policies including 3 months paid parental.
• 100% of employee-only insurance premiums covered (healthcare, dental and vision).
• Up to 5% matched 401k contribution.
• Opportunities for career advancement and ongoing training.
• Participation in industry conferences and events.

Company Overview