Senior Detection Engineer / Threat Detection Lead

About the role

We are seeking a senior‑level professional to lead and expand our threat detection capability within a highly regulated enterprise environment. You will design detection strategies, drive proactive threat hunting, and enhance our overall cyber resilience.

Key responsibilities

• Design, develop and continuously improve detection rules across SIEM and XDR platforms.
• Lead proactive threat‑hunting activities to uncover advanced threats before they become incidents.
• Own the full detection lifecycle—from creation and testing to optimisation and retirement.
• Collaborate closely with Incident Response, Threat Intelligence, Red Team and Purple Team functions.
• Build and enhance Detection‑as‑Code capabilities using modern engineering practices.
• Translate threat intelligence into high‑quality detections and support cyber‑resilience programmes.
• Provide technical leadership, mentor colleagues and shape the future direction of the detection capability.

Required profile

• Extensive experience in detection engineering, threat hunting or security operations.
• Strong knowledge of Microsoft Sentinel, Splunk, QRadar or similar SIEM technologies.
• Familiarity with MITRE ATT&CK, threat intelligence, incident response and purple‑team engagements.
• Experience in highly regulated sectors such as financial services, critical infrastructure or government is advantageous.
• Excellent stakeholder management and leadership skills.

Required skills

• Microsoft Sentinel, Splunk, QRadar (SIEM/XDR platforms)
• MITRE ATT&CK framework
• Detection‑as‑Code concepts
• CI/CD pipelines
• Git version control
• Python scripting
• PowerShell scripting

What we offer

• Ownership of the organisation’s detection strategy.
• Opportunity to influence security strategy and build a modern detection engineering capability from the ground up.
• Collaboration with experienced security professionals in a hybrid work environment (2 days onsite per week).