Jack & Jill
Security Engineer, Detection & Response at Doxy.me
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Engineer, Detection & Response at Doxy.me
Security Engineer, Detection & Response
Location London, UK (Remote)
About the Company
Doxy.me is a leading global telehealth platform trusted by over one million healthcare providers to deliver secure care across 180+ countries. As a HIPAA-regulated service, Doxy.me connects patients and providers through innovative technology and world-class design, ensuring that healthcare remains accessible and secure for millions of users worldwide.
About the Role
You will be the first dedicated Detection & Response engineer at Doxy.me, building the function from the ground up. You'll own the detection lifecycle using a detection-as-code approach, building telemetry pipelines, and responding to threats across a cloud-native AWS platform to protect sensitive patient data for millions of providers and patients worldwide.
Why this role is remarkable
- Greenfield opportunity: Shape the entire detection and response function from scratch, defining the tooling, strategy, and roadmap for a global healthcare platform.
- High-impact mission: Protect sensitive medical data for over a million providers and their patients in a mission-driven, HIPAA-regulated environment.
- Autonomous team: Work in a senior-heavy, engineering-led team with no SOC manager, allowing you to drive initiatives using modern tools like Datadog and AWS.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Responsibilities
- Own the end-to-end detection lifecycle by researching threats and writing rules as code deployed via CI/CD pipelines rather than manual SIEM configuration.
- Build and maintain critical telemetry pipelines to gain deep visibility into application, infrastructure, and identity activity across the cloud-native ecosystem.
- Lead incident response efforts, including investigation and containment, while building automated response workflows that integrate directly with AWS and identity systems.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Requirements
The ideal candidate will have:
- Proven experience in detection engineering with a strong background in software engineering—Python or TypeScript.
- Deep technical expertise in AWS and cloud-native infrastructure, capable of correlating signals across complex data sources using SQL and Datadog.
- Self-directed professional who thrives with ambiguity and can partner with product teams on threat modeling to identify security opportunities at the design phase.
Additional Notes
This is a legitimate opportunity being recruited for Jack’s professional network by Jill, an AI recruiter.
- If interested, consider reaching out to Jack for deeper support with applications, interviews, and career guidance.
- Further details may also be available from Jack if this role isn’t pursued.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location