Strand Intelligence
Forward Deployed Engineer
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Forward Deployed Engineer
Strand Intelligence · Manchester, UK (hybrid, travel required), · Permanent
About Strand
Strand Intelligence is a cutting-edge cybersecurity startup revolutionising incident response with our AI-powered DFIR platform. We automate evidence gathering, investigations, remediation, timeline construction, and reporting, helping DFIR firms reduce operational effort by over 90% and run incidents 5x faster end-to-end. Designed with real-world responders, we help clients handle breaches faster, cost-effectively, and without outsourcing. Recognised as CRN's Cloud Security Product of the Year 2025, Strand is building a safer digital environment.
We've beginning a project to deploy our agentic AI forensics platform into the live environment of a critical national infrastructure provider, one of the first deployments of its kind in UK CNI. It's a 12-month, milestone-driven project with a national-scale partner, and it's the foundation for our expansion across adjacent CNI markets.
The role
You'll be the engineer embedded at the sharp end of this deployment: taking our agentic AI forensics platform into the live environment of a major UK CNI provider and making it work against their real detection stack, real infrastructure, and real constraints. You’ll own the integration alongside Strand’s current technical lead, sit close to the customer, and focus on making a real, production impact.
Concretely, that means building bespoke connectors into the customer's SIEM, EDR, and ticketing stack so that alerts automatically trigger autonomous investigations; extending our collection agents across a heterogeneous estate of endpoints, cloud tenants, and legacy systems; hardening the deployment for a high-availability critical infrastructure environment; and shipping feedback-driven releases informed by the analysts using the platform every day.
This is a permanent role with a deliberate arc. You'll spend the first year forward-deployed on this project, working directly with our CEO (a former DFIR technical director) and the wider Strand team across product, sales and engineering. On successful completion, you'll move into our core product team, bringing everything you've learned about what real security teams need. If you want to shape a product by living inside a customer's environment first, this is that job.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What you will own
- Integration engineering — bespoke connectors between our platform and the customer's detection stack (SIEM, EDR, AV, ticketing), enabling both point-in-time and continuous, fully-autonomous investigation.
- Evidence collection at scale — agent-based and agentless acquisition across varied endpoints, OS log environments, and cloud tenants, streaming into our unified investigation dataset.
- CNI-grade deployment — staging and live deployment with least-privilege access, defined collection boundaries, audit logging, and rollback controls. Zero tolerance for availability impact, and you'll build accordingly.
- Feedback-driven releases — turning prioritised user research findings into shipped improvements across two major release cycles, with full traceability.
- Customer-facing engineering — workshops, deployment sessions, and troubleshooting on-site with the customer's security team. You're the technical face of Strand inside their environment.
- Reference architecture — documenting a reusable CNI deployment pattern that becomes the template for every customer that follows.
What we're looking for
- Strong software engineering fundamentals — 3–7 years building production systems in Go or Typescript/Node, or similar languages. A strong computer science foundation, formal or self-taught. However we care more about people who can demonstrate brilliant product work and ownership over years of experience.
- Integration experience — you've built against third-party APIs, webhooks, log pipelines, or enterprise systems, and you know that the documented behaviour and the actual behaviour are rarely the same thing.
- Deployment ownership — comfortable with cloud infrastructure, CI/CD, and being accountable for something running reliably in someone else's environment.
- Customer-ready — you can sit in a room with a customer's security team, explain a technical decision, take criticism of your work gracefully, and come back with a fix.
- Security curiosity — you don't need a DFIR background, but you need genuine interest in how attacks and investigations work. You'll be learning from some of the best in the field.
- Seed-stage temperament — self-directed, pragmatic, and comfortable owning problems end-to-end without a spec handed to you.
- AI-Driven Development – You are comfortable using AI extensively for research and development tasks, and can demonstrate an understanding of where they can expediate your work, and where human review and expertise is still required.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
What would make you stand out
- You've worked with security tooling: SIEM, EDR, SOAR, or log analytics platforms.
- You've deployed software into regulated or high-assurance environments: utilities, finance, government, or healthcare.
- You've been a forward deployed engineer, solutions engineer, or technical consultant, and you liked the customer-facing part.
Compensation and benefits
- Salary: £60,000 – £70,000 depending on experience, permanent role.
- A defined path into our core product team following successful project completion.
- MacBook, monitor, and a fully-kitted office setup.
- £2,500 personal travel allowance per year, for your holidays.
- Your birthday off, on us.
- Team offsites, quarterly socials, and a genuinely good culture.
- Training and development budget aligned to your career path.
How to apply
Send a short note explaining why this role and why Strand to will@strandintelligence.com. If you've built a project, tool, or deployment you're proud of, especially one that had to survive contact with a real customer environment, send over your GitHub too. We read everything.
Strand Intelligence is an equal opportunities employer. We welcome applications from all backgrounds and are committed to building a team that reflects the diversity of the customers and communities we serve.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills