Senior Cyber Security Engineer

At Aberdeen, our ambition is to be the UK's leading Wealth & Investments group. Strengthening talent and culture is one of our strategic priorities. We strive to make Aberdeen a great place to work so that we can attract and retain the industry's best talent. Our people put our stakeholders at the heart of everything they do by helping us to make a positive difference to the lives of our clients, customers, colleagues, shareholders, and society.

About the department: At Aberdeen, the Security, Resilience and Protection departments, the security of our customer assets and data is of paramount importance, especially within our changing digital world. Within our department, an exciting and challenging opportunity has arisen for an experienced and ambitious Security Engineer.

About the opportunity: Are you passionate about cyber security? Do you want to be part of a growing, collaborative, and supportive engineering team? Do you want to learn and expand your skills as part of a digital transformation journey?

About the role: This role represents a unique opportunity to contribute to the evolution of the cyber security engineering team and engage with teams across the enterprise to develop a best-in-class engineering function using emerging technologies and innovative working practices. Reporting to the Cyber Security Engineering Manager, you will be responsible for designing, implementing and maintaining our next-generation detection and log management platforms. This role sits at the intersection of SIEM engineering, cloud security, and advanced log pipeline management, ensuring that our enterprise maintains world-class detection fidelity, threat visibility and compliance across diverse environments.

You will help us deliver improvements across several of our cyber security domains including Security Data & Analytics, Security Automation, Incident Response and Threat Detection. Additionally, you will work closely with our Cyber Security Operation Centre, wider security functions, specialist 3rd party security suppliers and our global IT and business teams.

As a part of the Cyber Security Operations team, this role will support:

• Security Platform Optimisation, covering endpoint, network, cloud and logging technologies.
• Security Orchestration Automation and Response, building security automation playbooks and integrations.
• Security Data & Analytics, onboarding data and developing detection logic and analytics.
• SOC Architecture, developing interface definitions and security guidelines.
• Incident response, as part of the Cyber Security Incident Response Team for cyber incidents.

About the candidate: You will need to have demonstrable experience working in cyber security engineering or aligned functions, as well as experience of security platform optimisation, covering endpoint, network and cloud security, and logging technologies. A deep understanding of SIEM and log ingestion technologies as well as a solid knowledge of SOAR tools, AV, CSPM, EDR/XDR technologies and a passion to keep up to date with evolving threat and vulnerability landscape and new technologies are ideal.

Specifically:

• SIEM engineering & Operations: Development of advanced detection rules, correlation searches, and playbooks to improve threat detection and response. Perform log source onboarding, parsing, and data normalisation on various data types. Experience with design, development, configuration and maintenance of SIEM alerts to support our SOC Operations.
• Log Management & Data Engineering: Engineer and maintain log pipelines to optimise ingestion, filtering, routing and replay. Ability to work confidently on intelligent log transformation, data enrichment and routing strategies. Architect scalable solutions for log archival, data rehydration and compliance-driven retention.
• Cloud Security: Leverage Azure-native security services such as Microsoft Defender XDR, Defender for Cloud, Azure Monitor and Azure AD. Implement security monitoring, alerting and automation across Azure logging and IaaS/PaaS/SaaS workloads. Integrate Azure EventHubs, Log Analytics and a strong knowledge of Kusto Query Language (KQL) as well as Splunk Processing Language (SPL) to optimise data pipelines and detection engineering.

Our benefits: There's more to working life than coming home with a good salary. We have an environment where you can learn, get involved and be supported. When you join us, your reward will be one of the best around. This includes 40 days' annual leave, a 16% employer pension contribution, a discretionary performance-based bonus (where applicable), private healthcare and a range of flexible benefits - including gym discounts, season ticket loans and access to an employee discount portal.

An inclusive way of working: Whatever way you like to work, if you have the talent and commitment to join our team, we'd like to hear from you. At Aberdeen we've adopted a 'blended working' approach. This approach combines the benefits of face-to-face collaboration, coaching and connecting in our offices with the flexibility of working from home. It enables colleagues to find a balance that works for their roles, their teams, our clients and our business.

We are committed to providing an inclusive workplace where all forms of difference are valued and which is free from any form of unfair or unlawful treatment.