Security Engineering Manager - Detection Engineering

Tesco
Welwyn Garden City
1 month ago
Create job alert

Security Engineering Manager (Detection)


As a Security Engineering Manager, you will lead a squad within Detection Engineering, focusing on management, leadership, and delivering cyber defensive outcomes at Tesco. Your primary responsibility is to guide a team of security engineers in developing and implementing security controls that bolster our cyber defence to detect and support response to digital threats, while supporting and integrating with other teams across prevention, operations, and automation.

Your team specialises on Microsoft related security technologies, but also works closely with other technologies from Splunk, Databricks, and those related to deception operations.


Your objective is to safeguard our customers, suppliers, colleagues, networks, systems, applications, and information from cyber-attacks.


You will excel in enhancing security outcomes efficiently and cost-effectively, working with teams that possess a diverse range of skills, from hands-on technical expertise to architectural knowledge. Fostering a culture of innovation and curiosity within your team is essential to this role.


In this job, I am accountable for:


  • Threat-Led Prioritisation: Evaluates and prioritizes cyber threats to Tesco, analysing machine signals and intelligence and human factors to identify trends and actionable data for threat management.
  • Secure & Test-Driven Engineering: Proficient in applying industry frameworks (MITRE ATT&CK, NIST CSF, etc), integrating security into the software development lifecycle by applying secure coding practices, utilising test-driven development (TDD) for code reliability, and conducting thorough code reviews to mitigate potential security vulnerabilities.
  • Intrusion Detection & Analysis: Define and drive procedures to identify detection opportunities, assess risk reduction, and ensure mature detection outcomes, reporting detection quality, coverage and cost where required.
  • Incident Management, Incident Investigation & Response: Coordination with security operations teams to support incident management, investigation and response activities when required.
  • Research: Defines research goals, generates innovative ideas, summarizes and disseminates findings, and contributes to organizational security strategy.
  • Enterprise Technology: Understands Enterprise technology infrastructure, systems, solutions, tools and architecture, including the importance and principles of security, managing incidents, and programming languages.
  • Development Lifecycle: Understands the end-to-end software development lifecycle, and the processes and checkpoints involved, from planning, designing, building, testing, deploying and maintenance and how this applies to their role.
  • Delivery Methodologies: Understanding of Agile and other methodologies, including product management frameworks, and of the full product management lifecycle and how different Agile practices can be used.


Relevant Operational skills required:


  • Management & Leadership: Effectively manages people, including performance and incentive management, and applies leadership practices to achieve targets and foster an inclusive environment where people feel like they belong.
  • Communication & Influencing: Identifying and engaging stakeholders, using a range of techniques (e.g. storytelling, presentations, reports, influencing, negotiation and difficult conversations).
  • Data Analytics & Insights: Defining suitable metrics, obtaining and analysing data using the right tools, spotting trends and gaining and explaining insights to influence and enable decisions and measure impact.
  • Curiosity & Learning: Reflecting on practice, adapting and challenging assumptions, seeking new ideas and perspectives, and striving to gain new skills and knowledge.
  • Embracing & Enabling Change: Need, appetite and potential impacts of change, including embracing the opportunities and challenges of change.
  • Strategic Thinking & Problem Solving: Strategic and critical thinking to identify problems and how to apply chosen methodologies to solve problems and create value for the business.
  • Finance & Procurement: Finance and procurement processes, and budget management, including estimation, forecasting, planning and tracking spending.


Relevant Experience required:


Essential


  • Direct Line Management Responsibilities
  • Agile Ways of Working (Scrum, DevOps, Kanban, etc)
  • Security Engineering Experience (Detection, Prevention, Automation, etc)
  • Common Productivity Tools (Confluence, Miro, Teams, etc)
  • Common Development Tools (Jira, GitHub, etc)


Desirable


  • Cybersecurity Engineering Management or Leadership
  • Microsoft Defender for Endpoint/Identity/Cloud
  • Microsoft Sentinel / Splunk Enterprise Security
  • Professional Industry Membership (CIISec, BCS, etc)
  • Security Certification (ISC2, ISACA, CompTIA, SANS, EC-Council, etc)
  • Detection-as-Code / DevOps for SecOps

Related Jobs

View all jobs

Security Engineering Manager - Detection Engineering

Senior Cloud Native Security Consultant

IT Data Protection Security Engineer - Senior Manager

Head Global Security Engineering (Basé à London)

Head Global Security Engineering (Basé à London)

Security Engineer (Network, OT, Cloud and Web)

Get the latest insights and jobs direct. Sign up for our newsletter.

By subscribing you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Job-Hunting During Economic Uncertainty: Cyber Security Edition

The cybe rsecurity sector sits at the forefront of today’s digital landscape, defending businesses and governments alike from increasingly sophisticated threats. From incident response and network security to cloud protections and zero-trust architectures, cyber security professionals tackle an ever-evolving array of challenges. Yet, even this mission-critical field is not immune to economic turbulence. When broader financial markets experience uncertainty—whether through global recessions, regional downturns, or unexpected macro events—the hiring climate can shift, making roles more selective and budgets tighter. For job seekers in cyber security, this can be disconcerting. You might discover that once-abundant vacancies have become scarce, competition for the remaining positions is fiercer, or company priorities pivot away from large-scale expansions toward essential, cost-justified security projects. At the same time, data breaches and cyberattacks don’t pause during economic slowdowns—if anything, they may escalate as bad actors exploit organizational vulnerabilities. This paradox means that while the market feels tough, demand for cyber security expertise remains robust. In this article, we’ll look at: Why economic uncertainty affects cyber security hiring trends. Strategies for staying competitive, even if the number of open roles shrinks. Methods to highlight your skills, adapt to shifting priorities, and network effectively. Approaches for preserving mental well-being during prolonged searches or uncertain feedback loops. How www.cybersecurityjobs.tech can help you find the ideal security-focused role. By proactively sharpening your skill set, tailoring your professional profile, and engaging with a focused community, you can secure a rewarding cyber security job—even when the broader market feels volatile.

How to Achieve Work-Life Balance in Cyber Security Jobs: Realistic Strategies and Mental Health Tips

Cyber security is one of today’s most vital and rapidly expanding sectors. As data breaches, ransomware, and other cyber threats continue to evolve, the demand for skilled professionals is surging across industries—from finance and healthcare to government and e-commerce. Whether you’re a penetration tester, security analyst, or threat intelligence expert, you play a key role in safeguarding digital infrastructure and sensitive information. This high-stakes environment, however, often comes with intense pressure. Long hours, constant vigilance, and an ever-changing threat landscape can make it challenging to find time for personal well-being. Many cyber security specialists report difficulty striking a sustainable work-life balance, unsure if it’s even possible in a field that never truly sleeps. Yet, as concerns about mental health and burnout become more pressing, professionals and employers alike are seeking better ways to combine career advancement with a fulfilling personal life. In this comprehensive article, we’ll explore how to achieve a work-life balance in cyber security. You’ll discover strategies for managing 24/7 threat alerts, the importance of realistic expectations, ways to maintain mental health in high-intensity roles, and tips for setting boundaries without compromising your professional growth. Whether you’re new to this dynamic arena or already an established specialist, these insights can help you thrive personally and professionally in the fast-paced world of cyber security.

Transitioning from Academia to the Cyber Security Industry: How Researchers Can Harness Their Skills to Protect Commercial Environments

Cyber security has become a mission-critical field in an era where data breaches, ransomware attacks, and sophisticated hacking techniques threaten businesses and public institutions alike. As digital transformation touches nearly every facet of modern life, the need for highly skilled individuals capable of defending systems and networks continues to grow. For PhDs and academic researchers with expertise in areas like cryptography, network security, or threat intelligence, this presents an exciting opportunity to deploy your analytical prowess in a high-impact, fast-paced commercial setting. In this guide we’ll explore how academics can successfully pivot from the research lab to the cyber security industry. Learn how to apply rigorous, theory-driven approaches to real-world challenges, from designing secure software architectures to neutralising advanced persistent threats. By embracing the industry’s urgency and end-to-end mindset, you can transform your scholarly insights into robust, market-facing security solutions that protect companies and users on a global scale.