Security Engineer III in Vauxhall

At Anaplan, we are a team of innovators focused on optimizing business decision-making through our leading AI-infused scenario planning and analysis platform so our customers can outpace their competition and the market. Our customers rank among the who’s who in the Fortune 50. Coca-Cola, LinkedIn, Adobe, LVMH and Bayer are just a few of the 2,400+ global companies who rely on our best-in-class platform.

Our Winning Culture is the engine that drives our teams of innovators. We champion diversity of thought and ideas, we behave like leaders regardless of title, we are committed to achieving ambitious goals, and we love celebrating our wins – big and small. Supported by operating principles of being strategy-led, values-based and disciplined in execution, you’ll be inspired, connected, developed and rewarded here. Everything that makes you unique is welcome; join us and let’s build what’s next together!

What you’ll be doing:

• As a Security Engineer within the Security Operations team, you will help design, build, and continuously improve the technical capabilities that underpin how we detect, investigate, and respond to threats.
• Your core responsibilities will be to:
• Alert Investigation & Triage: Investigate and triage security alerts from across our detection tooling, analysing logs, endpoint, identity, cloud, and network telemetry to determine impact and root cause.
• Incident Response & DFIR: Support the investigation and response to confirmed security incidents, applying digital forensics and incident response skills across endpoint, cloud, and identity data.
• SIEM Engineering: Contribute to the engineering of our SIEM platform, including onboarding and normalising log sources, building and maintaining parsers, and supporting high-fidelity data pipelines.
• Detection Engineering: Help develop and maintain a library of high-quality detections using a Detection as Code methodology.
• AI-Augmented Security Operations: Help explore and apply AI and machine learning to enhance security operations capabilities.
• Threat Intelligence Integration: Help consume and operationalise threat intelligence from internal and external sources.
• Threat Hunting: Take part in proactive, hypothesis-driven threat hunts across the environment to identify attacker activity that evades existing detections.

What you’ll bring to the role:

• We are looking for a technically capable security professional with hands-on experience in security operations. The ideal candidate will possess:
• Technical Security Experience: Commercial experience in a security operations role, with a solid grounding in securing cloud-native environments and modern application stacks.
• Incident Response & Digital Forensics: Hands-on experience supporting security incident investigations.
• Detection & Response Skills: Practical experience developing and tuning SIEM detections.
• SecOps Tooling: Hands-on knowledge of administering and operating core security operations tools.
• Threat Intelligence & Threat Hunting: Experience working with threat intelligence platforms and feeds.
• Scripting & Automation: Proficiency in one or more scripting or programming languages (e.g. Python, Go, Bash).
• Application Security Knowledge: Familiarity with secure development practices.
• Security Frameworks & Standards: Working knowledge of relevant security frameworks.
• Communication & Collaboration: Strong ability to articulate technical security risks and recommendations.

Our Commitment to Diversity, Equity, Inclusion and Belonging (DEIB): We believe attracting and retaining the best talent and fostering an inclusive culture strengthens our business. DEIB improves our workforce, enhances trust with our partners and customers, and drives business success.