Lead Security Engineer

We are looking for a lead security engineer / risk analyst to own the hands-on security engineering and risk-analysis work — building and operating security controls, running vulnerability and threat analysis, leading investigations, and guiding a small team of engineers and analysts. This is a senior technical lead accountable for the practical, day-to-day security posture: detection engineering, control implementation, and the risk analysis that tells leadership where to spend next.

The defining shift for this role in 2026 is AI moving directly into the analysis pipeline. Modern SIEM and SOAR platforms now integrate LLM-based reasoning into the alert flow, handing analysts a summarized incident brief — what happened, what it connects to, and why it likely matters — instead of raw log data. Vulnerability management is under pressure from the other side too: agentic AI can identify and exploit vulnerabilities at the speed of compute. The lead is expected to direct, constrain, and verify AI-assisted work while keeping the technical judgment to catch an agent when it is wrong.

The value this person brings is stronger controls and sharper risk analysis delivered hands-on — with AI used to accelerate detection and triage, and human judgment kept firmly in the loop.

We are seeking a hands-on security engineer and risk analyst who can both build controls and reason about risk — someone who does detection engineering, digs into vulnerabilities and incidents, and can lead a small team while staying technical. They use AI to speed analysis but never outsource the judgment call.

This profile partners across SOC / operations, IT / infrastructure, application / engineering teams, and security management. It suits someone open to a hybrid engagement, and to mobilization to the Middle East, Europe, or North America depending on the client. The person we want makes the environment measurably harder to attack.

A strong candidate for this role has done hands-on security engineering and risk analysis — someone who has built and tuned controls, run vulnerability management and investigations, and led or mentored a small team of engineers/analysts. They bring an openness to AI-accelerated detection and triage while owning the verification.

In practice, the responsibilities break down as follows:

• Security engineering: Design, implement, and operate security controls and detection logic across identity, endpoint, network, cloud, and applications.
• Risk & vulnerability analysis: Run vulnerability management and risk analysis; prioritize remediation as agentic attackers compress the exploit window.
• Investigation & response: Lead technical investigations; work SIEM/SOAR alerts through to resolution.
• Team leadership: Guide and mentor a small team of engineers/analysts; set technical standards.
• AI-assisted analysis: Use LLM-integrated SIEM/SOAR to work from summarized incident briefs, directing and verifying AI-assisted work rather than trusting it blindly;.

We want to see a security lead with real engineering depth and risk-analysis instincts who can build controls, run investigations, and lead a small team — and who uses AI to accelerate detection and triage while owning verification. The strongest candidates understand both AI-assisted defense and AI-specific threats.

Core security engineering

• Detection engineering, SIEM/SOAR, vulnerability management, and incident investigation.
• Security frameworks (MITRE ATT&CK, NIST); identity, cloud (AWS, Azure, GCP or equivalent), and application security.
• Risk analysis and remediation prioritization.

Analysis performance (KPIs from research)

• Steers detection quality, vulnerability remediation timeliness, false-positive/false-negative rates, and investigation throughput — as LLM-integrated tooling reshapes triage.

Modern Agentic AI / AIOps (niche areas we are seeking — depth explored at interview)

• LLM-integrated SIEM/SOAR that delivers summarized incident briefs into the alert pipeline.
• Vulnerability management in the agentic era, where exploitation moves at the speed of compute.

This role is delivered through Solutions Chapter Group's Human Resources chapter (Chapter 12) as a Recruitment Process Outsourcing (RPO) engagement, under our Technical Recruitment stream. Rather than a "post-and-pray" marketplace approach, we use a Curated Professional Recruitment model: candidate profiles are pre-vetted in our internal database, and when a required profile isn't already available, our dedicated Scout network conducts global headhunting to secure it. We screen and match candidates against each client's specific requirements, and placements may be remote or an on-site deployment with mobilization to the Middle East, Europe, or the United States.

From a recruitment-fit perspective, we screen for:

• Hands-on security engineering depth.
• Sharp risk and vulnerability analysis.
• Investigation and detection-engineering ability.
• Sound use of AI with human verification.
• Openness to the engagement model (remote or mobilized on-site) and readiness for cross-region deployment.

Areas to explore at interview *(topics only)*

• A control or detection you engineered
• Prioritizing vulnerability remediation