Threat Detection Engineer

Reference: fyjfvubsulh5s4dxoqbc

We are seeking a Threat Detection Engineer to strengthen the organisation’s ability to identify, investigate and respond to cyber threats. You will design, develop and maintain detection capabilities across cloud, on-premises and endpoint environments, helping to protect critical systems, applications and data.

In this role, you will create and tune detection rules using security information and event management (SIEM), endpoint detection and response (EDR), network monitoring and cloud security platforms. You will analyse logs and telemetry, develop queries and correlation logic, and reduce false positives while ensuring genuine threats are identified quickly. You will also contribute to threat hunting activities based on current intelligence, emerging attack techniques and observed adversary behaviour.

You will work closely with security operations, incident response, infrastructure, engineering and risk teams to investigate suspicious activity and improve detection coverage. Responsibilities will include assessing alerts, supporting incident investigations, documenting technical findings, conducting root-cause analysis and recommending improvements to monitoring and response processes. You will help map detections to recognised frameworks such as MITRE ATT&CK and maintain clear, accurate technical documentation.

The successful candidate will have experience in threat detection, security monitoring, threat hunting, incident response or a closely related discipline. You should be confident working with SIEM and EDR technologies, writing queries in languages such as Kusto Query Language (KQL), SPL or SQL, and interpreting logs from operating systems, networks, applications and cloud services. Knowledge of common attack methods, intrusion techniques, vulnerabilities and indicators of compromise is essential.

Strong analytical and problem-solving skills are required, along with the ability to communicate technical issues clearly to both specialist and non-specialist audiences. Experience with automation, scripting in Python or PowerShell, detection-as-code practices and cloud platforms would be advantageous. Relevant professional certifications or demonstrable practical experience are welcome.

This is an opportunity to make a direct contribution to cyber resilience, continuously improve defensive capabilities and help shape a proactive, intelligence-led security function.

COMPETITIVE SALARY
Added 30/10/2026
Reference: fyjfvubsulh5s4dxoqbc

Other similar jobs

Threat Detection Engineer

Added 30/10/2026

We are seeking a Threat Detection Engineer to design, develop and maintain effective security detections across a complex technology environment. You will work as part of a collaborative cyber security function, helping to identify suspicious activity, reduce exposure to emerging threats and improve the organisation’s ability to detect and respond to incidents. Your responsibilities will include creating and tuning detection rules across SIEM, endpoint, cloud and network security platforms. You will investigate alerts, assess their relevance and accuracy, and use threat intelligence, adversary techniques and incident findings to improve detection coverage. You will also support the development of use cases...

Learn more

SOC Engineer

Added 30/10/2026

We are seeking a skilled SOC Engineer to support the operation, development and continual improvement of a security operations capability. You will help protect systems, applications, networks and data by monitoring security events, investigating suspicious activity and responding to incidents in a structured and timely manner. The role will involve analysing alerts from SIEM, endpoint detection and response, network monitoring and vulnerability management tools. You will triage and investigate potential threats, identify indicators of compromise, carry out initial containment activities and escalate complex incidents when required. You will also contribute to forensic investigations, root-cause analysis and the preparation of clear...

Learn more

SOC Engineer

Added 30/10/2026

We are seeking a SOC Engineer to help protect critical systems, applications and data from evolving cyber threats. Working within a collaborative security operations function, you will monitor, investigate and respond to suspicious activity while helping to strengthen detection and response capabilities across the environment. Your responsibilities will include analysing security alerts from SIEM, endpoint detection and response, network monitoring and cloud security platforms. You will investigate incidents, assess potential impact, identify root cause and coordinate appropriate containment and remediation actions. You will also contribute to threat hunting, vulnerability investigations and the development of incident response playbooks, ensuring that activity...

Learn more

CyberArk Engineer

Added 16/10/2026

We are seeking an experienced CyberArk Engineer to support the design, implementation and ongoing management of privileged access management solutions across a complex technology environment. You will be responsible for maintaining the CyberArk platform, ensuring privileged accounts, credentials and secrets are securely onboarded, managed and monitored in line with established security policies and industry best practice. Your duties will include configuring and administering CyberArk components such as the Digital Vault, Central Policy Manager, Password Vault Web Access and Privileged Session Manager. You will onboard privileged accounts, develop and maintain policies, manage safes, investigate access or authentication issues, and support secure...

Learn more

Data Engineer (Python, Kibana, Elasticsearch & AWS) - DV Security Clearance

Added 22/09/2026

We are seeking an experienced Data Engineer to design, build and maintain reliable data solutions within a secure technology environment. Working with Python, Elasticsearch, Kibana and AWS, you will help transform complex data into accessible, high-quality information that supports operational decision-making, monitoring and analysis. This is an opportunity to contribute to technically challenging projects where security, resilience and performance are essential. Your responsibilities will include developing and maintaining data ingestion and processing pipelines using Python; collecting, cleansing, validating and transforming structured and unstructured data; and designing effective Elasticsearch indices, mappings and queries. You will create and enhance Kibana dashboards, visualisations...

Learn more

Detection & Response Security Engineer, Threat Intelligence

Added 22/09/2026

We are seeking a Detection & Response Security Engineer, Threat Intelligence, to strengthen cyber defence capabilities across a complex and evolving technology environment. In this role, you will monitor the threat landscape, identify emerging risks, and translate intelligence into practical detection and response improvements. You will work closely with security operations, incident response, engineering, and risk teams to investigate suspicious activity, improve visibility, and help protect critical systems, data, and users. Key responsibilities will include collecting, analysing, and validating threat intelligence from open, commercial, and internal sources; developing and maintaining indicators of compromise, detection rules, and threat-hunting hypotheses; and mapping...

Learn more

Cyber Security Engineer - Threat Detection

Added 11/09/2026

We are seeking a Cyber Security Engineer specialising in Threat Detection to help protect critical systems, applications and data from evolving cyber threats. You will join a security-focused team responsible for improving detection capabilities, investigating suspicious activity and supporting the ongoing development of a resilient security monitoring function. This role is suited to an analytical security professional who enjoys working across technology, operations and incident response. Your responsibilities will include designing, developing and tuning detection rules, alerts and use cases across SIEM, endpoint detection and response, network monitoring and cloud security platforms. You will monitor security events, investigate potential threats,...

Learn more

Cyber Security Engineer - Threat Detection

Added 09/09/2026

We are seeking a Cyber Security Engineer – Threat Detection to strengthen security monitoring and incident detection capabilities across a complex technology environment. In this role, you will design, develop and maintain detection use cases that identify suspicious activity across endpoints, networks, cloud platforms, applications and identity systems. You will work closely with security operations, infrastructure, engineering and risk teams to investigate threats, improve visibility and reduce the time required to detect and respond to security incidents. Key responsibilities include creating and tuning detection rules, alerts, dashboards and correlation logic within security monitoring and analytics platforms; analysing security events and...

Learn more

Threat Hunting & Detection Analyst

Added 07/10/2026

We are seeking a Threat Hunting & Detection Analyst to identify, investigate and help disrupt advanced cyber threats across a complex technology environment. You will proactively search for indicators of compromise, suspicious behaviours and emerging attack techniques that may evade traditional security controls. Working closely with security operations, incident response, engineering and infrastructure teams, you will turn intelligence and investigative findings into practical improvements to monitoring and defensive capabilities. Your responsibilities will include developing and refining threat-hunting hypotheses, analysing security telemetry from endpoint, network, identity, cloud and application sources, and conducting detailed investigations into anomalous activity. You will create, test...

Learn more

Senior Cyber Threat Detection and Response Analyst

Added 14/09/2026

We are seeking a Senior Cyber Threat Detection and Response Analyst to lead the identification, investigation and containment of sophisticated cyber threats across a complex technology environment. You will monitor security events, analyse alerts and intelligence, and coordinate effective responses to incidents affecting networks, endpoints, cloud services, applications and critical data. The role will involve working closely with security engineering, infrastructure, risk and operational teams to strengthen defensive capabilities and reduce organisational exposure. Key responsibilities include developing and tuning detection rules, use cases and correlation logic; conducting advanced threat hunting across security telemetry; investigating indicators of compromise and suspicious activity;...

Learn more

Senior Detection Engineer | SecOps

Added 02/11/2026

We are seeking a Senior Detection Engineer to strengthen a security operations function and help protect critical systems, applications and data. This role will focus on designing, developing and continuously improving detection capabilities across cloud, infrastructure, endpoint and application environments. You will work closely with security operations, incident response, threat intelligence, engineering and technology teams to identify emerging risks and turn them into effective, actionable detections. You will create and maintain detection logic, correlation rules, alerts and dashboards across SIEM, EDR, cloud-native security and other monitoring platforms. Responsibilities will include analysing security telemetry, tuning detection content to improve accuracy, reducing...

Learn more

Detection Engineer

Added 16/10/2026

We are seeking a Detection Engineer to design, develop and improve security detections across a modern technology environment. You will work closely with security operations, threat intelligence, incident response and engineering teams to identify emerging threats and translate them into effective, reliable detection content. The role will involve analysing security events, investigating attack techniques, tuning alerts and helping to ensure that malicious activity can be identified quickly and accurately. Your responsibilities will include creating and maintaining detection rules, queries, playbooks and supporting documentation across platforms such as SIEM, endpoint detection and response, cloud and network security tools. You will assess...

Learn more

Security Engineer (Detection & Response)

Added 07/10/2026

We are seeking a Security Engineer (Detection & Response) to strengthen our ability to identify, investigate, and contain cyber threats across a complex technology environment. In this role, you will design, implement, and continuously improve security monitoring and detection capabilities across cloud, endpoint, network, identity, and application platforms. You will work closely with security operations, infrastructure, engineering, and risk teams to reduce exposure, improve visibility, and support a resilient security posture. Your responsibilities will include developing and tuning detection rules, analytics, and alerting logic within SIEM, EDR, SOAR, and related security platforms. You will investigate suspicious activity, conduct threat hunting,...

Learn more

Senior Security Engineer - Detection & Response

Added 23/09/2026

We are seeking a Senior Security Engineer – Detection & Response to strengthen and evolve our security operations capability. In this role, you will design, implement and maintain detection and response systems that identify, investigate and contain threats across cloud, endpoint, identity, network and application environments. You will work closely with security operations, infrastructure, engineering and risk teams to improve visibility, reduce response times and support the continuous improvement of the organisation’s security posture. Your responsibilities will include developing and tuning detection rules, analytic queries, dashboards and automated response workflows; investigating complex security alerts and incidents; leading technical response activities...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.