Senior Detection Engineer

Develop and implement advanced threat detection strategies and rules across diverse security technologies (SIEM, EDR, Cloud security tools). Proactively hunt for novel and sophisticated threats within the enterprise environment, leveraging threat intelligence and forensic analysis. Automate detection processes and workflows to enhance efficiency and reduce manual effort in threat identification. Collaborate with threat intelligence teams to translate emerging threats and TTPs into actionable detection logic.

Desired Candidate Profile

Essential Requirements 8+ years' experience in cyber security, with at least 4 years in detection engineering, threat detection or SOC engineering roles. Proven experience designing or leading a detection engineering function in a large or regulated organisation. Expert-level hands-on experience with Microsoft Sentinel (KQL, analytics rules, workbooks, watchlists, automation) and IBM QRadar (AQL, custom rules, building blocks, DSMs, reference sets). Proven track record of intelligence-driven detection development, turning CTI into operational detections. In-depth knowledge of MITRE ATT&CK, D3FEND, Cyber Kill Chain, Diamond Model, Pyramid of Pain and NIST CSF. Experience with detection-as-code, Git-based version control and CI/CD pipelines. Strong understanding of attacker tradecraft across Windows, Linux, cloud (Azure/M365), identity and network environments. Scripting skills in Python and/or PowerShell. Highly Desirable Banking or financial services experience. Experience with Sigma, YARA and threat intelligence platforms (e.g., MISP, OpenCTI, Recorded Future). Experience in purple teaming, adversary emulation or red team collaboration. Experience with Microsoft Defender XDR, EDR platforms and SOAR tooling. Background in threat hunting or cyber threat intelligence. Certifications (Preferred) GIAC certifications such as GCDA, GCIA, GCTI, GCIH or GREM Microsoft Certified: Security Operations Analyst Associate (SC-200) IBM QRadar certifications CISSP, OSCP or equivalent Key Competencies Strategic leadership: able to build a function from the ground up and align it with business risk. Technical depth: expert-level detection development across Sentinel and QRadar. Threat-informed mindset: thinks like an adversary and prioritises based on intelligence. Stakeholder management: communicates detection posture clearly to executives, auditors and regulators. Mentorship: develops talent and spreads good engineering practice across the team. Analytical rigour: makes data-driven decisions supported by meaningful metrics. Composure under pressure: offers steady, structured leadership during significant incidents. Education Bachelor's degree in Computer Science, Information Security, Engineering or a related field, or equivalent professional experience. Employment Type Full-time

Keywords