Job Search

We are seeking a Senior Detection Engineer to strengthen a security operations function and help protect critical systems, applications and data. This role will focus on designing, developing and continuously improving detection capabilities across cloud, infrastructure, endpoint and application environments. You will work closely with security operations, incident response, threat intelligence, engineering and technology teams to identify emerging risks and turn them into effective, actionable detections.

You will create and maintain detection logic, correlation rules, alerts and dashboards across SIEM, EDR, cloud-native security and other monitoring platforms. Responsibilities will include analysing security telemetry, tuning detection content to improve accuracy, reducing false positives and developing meaningful use cases aligned with current attack techniques. You will also contribute to threat hunting, malware and incident investigations, root-cause analysis and the documentation of response procedures.

The successful candidate will help establish engineering standards for detection development, testing, deployment and lifecycle management. You will assess coverage against recognised threat frameworks, identify gaps and recommend improvements to logging, instrumentation and data quality. The role will also involve automating repetitive tasks, integrating security tools and supporting the measurement of operational performance through clear metrics and reporting.

We are looking for substantial experience in security engineering, detection engineering, threat hunting or a closely related discipline. You should have strong knowledge of SIEM technologies, query languages, detection-as-code principles, incident response and common adversary tactics, techniques and procedures. Experience with cloud platforms, endpoint telemetry, scripting languages such as Python or PowerShell, and version-control workflows would be highly beneficial. Relevant professional certifications are welcome but not essential.

You will be a thoughtful problem-solver with strong analytical and communication skills, able to explain complex findings to both technical and non-technical audiences. A collaborative approach, attention to detail and commitment to continuous improvement are essential. This is an opportunity to make a measurable contribution to security maturity while helping build resilient, intelligence-led detection capabilities.

We are seeking an experienced Security Expert – Detection & Response to strengthen cyber defence capabilities and help protect critical systems, data and services. This role will lead the identification, investigation and resolution of security incidents, while improving the organisation’s ability to detect and respond to emerging threats.

You will monitor and investigate alerts from security information and event management, endpoint detection and response, network monitoring and cloud security platforms. Working across technical and business teams, you will assess potential threats, perform triage, contain incidents and coordinate remediation. You will also contribute to forensic investigations, root-cause analysis and post-incident reviews, ensuring lessons learned are translated into practical improvements.

Key responsibilities include developing and tuning detection rules, creating investigative playbooks and response procedures, and improving security monitoring coverage across infrastructure, applications, identities and cloud environments. You will support threat hunting activities, use threat intelligence to identify relevant attack techniques, and help validate controls through simulations, testing and continuous improvement. Clear and accurate incident reporting, risk communication and escalation to senior stakeholders will also be an important part of the role.

The successful candidate will have substantial experience in cyber security operations, incident response, threat detection or a related discipline. You should be confident analysing complex events and logs, correlating data from multiple sources, and making sound decisions under pressure. Practical knowledge of security monitoring technologies, endpoint and network security, identity systems, cloud platforms and common attack frameworks is essential.

Relevant professional certifications, such as those covering incident handling, security operations, digital forensics or threat intelligence, would be advantageous. You will need strong communication and collaboration skills, a methodical approach, and the ability to explain technical risks clearly to both specialist and non-specialist audiences. A proactive mindset, commitment to continuous learning and willingness to participate in an incident response rota may also be required.