Threat Detection Engineer
We are seeking a Threat Detection Engineer to strengthen the organisation’s ability to identify, investigate and respond to cyber threats. You will design, develop and maintain detection capabilities across cloud, on-premises and endpoint environments, helping to protect critical systems, applications and data.
In this role, you will create and tune detection rules using security information and event management (SIEM), endpoint detection and response (EDR), network monitoring and cloud security platforms. You will analyse logs and telemetry, develop queries and correlation logic, and reduce false positives while ensuring genuine threats are identified quickly. You will also contribute to threat hunting activities based on current intelligence, emerging attack techniques and observed adversary behaviour.
You will work closely with security operations, incident response, infrastructure, engineering and risk teams to investigate suspicious activity and improve detection coverage. Responsibilities will include assessing alerts, supporting incident investigations, documenting technical findings, conducting root-cause analysis and recommending improvements to monitoring and response processes. You will help map detections to recognised frameworks such as MITRE ATT&CK and maintain clear, accurate technical documentation.
The successful candidate will have experience in threat detection, security monitoring, threat hunting, incident response or a closely related discipline. You should be confident working with SIEM and EDR technologies, writing queries in languages such as Kusto Query Language (KQL), SPL or SQL, and interpreting logs from operating systems, networks, applications and cloud services. Knowledge of common attack methods, intrusion techniques, vulnerabilities and indicators of compromise is essential.
Strong analytical and problem-solving skills are required, along with the ability to communicate technical issues clearly to both specialist and non-specialist audiences. Experience with automation, scripting in Python or PowerShell, detection-as-code practices and cloud platforms would be advantageous. Relevant professional certifications or demonstrable practical experience are welcome.
This is an opportunity to make a direct contribution to cyber resilience, continuously improve defensive capabilities and help shape a proactive, intelligence-led security function.
Threat Detection Engineer
Other similar jobs
Popular job searches
Your next job
starts here.
JOB SPECIALISMS
LATEST JOBS
TOP SEARCHES
LOCATIONS
- Security Engineer
- Security Consultant
- Security Analyst
- Identity Access Management IAM
- IT Security Manager
- Security Architect
- Data Protection
- Governance and Compliance
- Cyber Security Consultant
- Risk Analyst
- SOC Analyst
- Application Security
LATEST JOBS
- Cyber Security Engineer
- Interim Cyber Security Interna...
- Lead DevSecOps Engineer
- Data Privacy Specialist UK
- Security and Compliance Engine...
- GCIO Operations Manager - Cybe...
- Information Security Analyst
- Senior Director - DevOps Secur...
- Head of Information Security
- Lead Cloud Security Engineer
- Cyber Policy Lead
- IT Security Auditor