We’re seeking a skilled and innovative Security Engineer to join our Cyber Detection and Response team on a 6 month fixed term contract to drive the development and implementation of security log sources and SOC use cases. 

Reporting into the Detection and Response Manager, you’ll lead the onboarding and management of log sources, designing and implementing new and existing use cases by collaborating with team members and other stakeholders. The ideal candidate will have hands-on experience with cloud SIEM technology such as Sentinel and Cribl.

At AXA we work smart, empowering our people to balance their time between home and the office in a way that works best for them, their team and our customers. You'll work at least 40% of your week away from home, moving to the majority of your working week from September 2025. Away from home means either attendance at one of our office locations, visiting clients or attending industry events. We’re also happy to consider flexible working arrangements, which you can discuss with Talent Acquisition.

What you’ll be doing: 

• Collaborating with cross-functional teams to identify business challenges and design data observability use cases
• Developing, deploying and optimizing log management pipelines using Cribl 
• Building and maintaining comprehensive documentation, including use case requirements, workflows, and best practices 
• Working closely with the threat intelligence, incident response, and operations teams to design solutions that support security and operational resilience
• Troubleshooting and resolving complex data pipeline and log processing issues 
• Staying up to date with industry trends, emerging technologies and technology advancements to recommend innovative solutions 

Due to the number of applications we expect to receive for this role, we reserve the right to close this advert earlier than the listed closing date to ensure we’re able to effectively manage interest. Therefore, if you’re interested in joining us at AXA, please don’t hesitate to apply. 

What you’ll bring: 

• Previous experience of security engineering in a security operations team
• Proven experience with cloud SIEM technology such as Sentinel and Cribl
• Strong background in data engineering, log management, or observability platforms
• Experience with systems like Sentinel, Elasticsearch, Kafka, or similar
• Proficiency in data transformation, enrichment, and routing
• Solid scripting and automation skills (e.g., Python, Bash, PowerShell)
• Familiarity with IT infrastructure, security operations, and cloud environments (e.g., AWS, Azure, GCP)
• Strong problem-solving skills with the ability to translate technical solutions into business value
• Knowledge of incident response workflows and threat intelligence integration is desirable 

Internal candidates are encouraged to apply for this role as a secondment opportunity through the internal careers site.

What we offer: 

At AXA UK, we’re appreciative of the people who work for us and our rewards package is reviewed regularly to reflect that. You can expect to receive:

• Competitive annual salary of £50,000 - £70,000 dependent on experience 
• Discretionary company & performance-based bonus
• Contributory pension scheme (up to 12% employer contributions)
• Life Assurance (up to 10 x annual salary)
• 28 days annual leave plus Bank Holidays
• Opportunity to buy up to 5 extra days leave or sell up to 5 days leave
• AXA employee discounts
• Gym benefits

To apply, click on the ‘apply for this job’ button, you’ll then need to log in or create a profile to submit your CV. We’re proud to be an Equal Opportunities Employer and don’t discriminate against employees or potential employees based on protected characteristics. If you have a long-term condition or disability and require adjustments during the application or interview process, we’re proud to offer access to the AXA Accessibility Concierge. For our support, please send an email to lauren.standen@axa-insurance.co.uk.  

#LI-Hybrid 

Who we are: 

AXA UK Support Functions power AXA’s three customer-facing business units, providing the infrastructure, support and expertise to ensure our customers can always count on us. Whether you’ve got heaps of experience and qualifications behind you, or you’re just starting out, we’ll give you the support and opportunities to help you grow and develop with confidence.