Detection Engineer
We are seeking a Detection Engineer to design, develop and improve security detections across a modern technology environment. You will work closely with security operations, threat intelligence, incident response and engineering teams to identify emerging threats and translate them into effective, reliable detection content. The role will involve analysing security events, investigating attack techniques, tuning alerts and helping to ensure that malicious activity can be identified quickly and accurately.
Your responsibilities will include creating and maintaining detection rules, queries, playbooks and supporting documentation across platforms such as SIEM, endpoint detection and response, cloud and network security tools. You will assess detection coverage against recognised adversary tactics and techniques, identify gaps and recommend improvements. You will also support the investigation of complex incidents, conduct proactive threat hunting and use findings from incidents, intelligence reports and vulnerability assessments to strengthen monitoring capabilities. A key part of the role will be reducing false positives while preserving appropriate sensitivity, measuring detection performance and communicating technical findings clearly to both technical and non-technical stakeholders.
You will have practical experience in security detection engineering, threat hunting, incident response or a closely related discipline, with a strong understanding of cyber security principles and common attack methods. Experience writing queries or rules in languages such as Kusto Query Language, Splunk SPL, SQL or a similar syntax is desirable, as is familiarity with endpoint, identity, cloud and network telemetry. You should be comfortable using scripting or programming languages such as Python or PowerShell to automate analysis and improve operational efficiency. We are looking for someone analytical, methodical and curious, who can work independently while contributing positively to a collaborative team. Relevant security certifications, knowledge of frameworks such as MITRE ATT&CK, and experience operating in a regulated or complex environment would be advantageous.
Detection Engineer
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Analyst
- Security Architect
- Security Consultant
- IT Security Manager
- Identity Access Management IAM
- SOC Analyst
- Cyber Security Consultant
- Data Protection
- Penetration Tester
- Application Security
- Governance and Compliance
LATEST JOBS
- Data Security Lead
- Data Protection Officer (Fract...
- UKI - Technology Risk - Direct...
- Principal Security Architect (...
- Cybersecurity - Manager
- Senior Specialist Field Engine...
- Product Support, IT & Security...
- NOC ENGINEER T1 - T2 - Network...
- Staff Security Architect
- Cryptographic Cyber Security E...
- Security Engineer
- Senior Application Security En...