Incident Response Security Engineer

About the role

We are looking for an Incident Response Security Engineer to join Prima’s Security Team. You will help protect our growing motor‑insurance platform by automating alert triage, strengthening endpoint detection, and building playbooks that keep our services safe.

Key responsibilities

• Automate the triage of security alerts and develop Incident Response playbooks.
• Enhance EDR/XDR and DLP configurations across our cloud environment.
• Create and tune automatic detections of security events in the SIEM.
• Improve enrichment and integration between SIEM and SOAR platforms.
• Write and maintain runbooks used during security incidents.
• Collaborate with the broader Security Engineering team on all related activities.

Required profile

• Hands‑on experience with SIEM and SOAR platforms.
• Practical knowledge of CrowdStrike or a comparable EDR/XDR solution.
• Familiarity with AWS or a similar cloud provider.
• Proficiency in scripting or programming languages such as Python or Rust.
• Willingness to participate in on‑call shifts to provide 24×7 security support.
• Strong English communication skills and the ability to work with multidisciplinary teams.
• Self‑motivated, proactive problem‑solver with accountability for deliverables.

Required skills

• SIEM
• SOAR
• EDR/XDR (e.g., CrowdStrike)
• DLP
• AWS
• Python
• Rust

What we offer

• Full‑remote work with the option to work from anywhere up to 30 days a year.
• Private healthcare, gym discounts, wellbeing and mental‑health programs.
• Access to learning resources, mentorship and a personalised growth plan.
• Inclusive culture that values diversity and equal opportunity.