Threat Detection Engineer

You will build and maintain a threat detection and automation platform. You will configure and tune SIEM detections, create log parsers and security automations, hunt for threats, and investigate complex security incidents. You will work across cloud infrastructure, internal applications, and employee endpoints while improving detection quality, reliability, and response efficiency.

Responsibilities

• Support the development and implementation of the strategic vision for threat detection.
• Create custom log parsers, configure alert rules, analyze logs, and tune detections to reduce false positives.
• Build security automations and services for data enrichment and phishing-email removal.
• Hunt for sophisticated threats across infrastructure using threat intelligence and detection techniques.
• Monitor and respond to threats across AWS, GCP, internal applications, and Windows and macOS endpoints.
• Develop and implement business-specific threat detection rules with cross-functional teams.
• Ensure detection quality and ecosystem uptime through test-driven development and proactive health monitoring.
• Build and enhance internal tools that improve threat detection, data visibility, and response efficiency.
• Lead complex incident investigations and coordinate containment, remediation, and recovery.
• Participate in the security incident response on-call rotation.

Requirements

• Knowledge of Splunk, Scanner, Sentinel, or SecOps.
• Understanding of modern cloud, SaaS, and desktop attack and defence techniques.
• Experience with AWS and GCP.
• Experience with Google Workspace, Okta, Windows, and macOS environments.
• Experience in security automation, scripting, and end-to-end automated workflows.
• Familiarity with SOAR platforms and automated threat detection and response.
• Spoken and written communication skills.

Benefits

• Share options.
• Generous annual leave in addition to bank holidays.
• Paid maternity, paternity, and adoption leave.
• Paid and unpaid sabbatical options after milestone years.
• Private family health insurance with OPD coverage and top-up options.
• Accident and life insurance.
• Access to therapy sessions, courses, meditations, and workshops.
• Paid volunteering and development days.
• Annual learning and development budget.
• Work from abroad for up to 90 days annually.
• Home office setup contribution.
• Laptop ownership upon replacement.
• Office snacks, coffee, tea, and lunch where location dependent.