Senior Detection Engineer

• Develop and implement advanced threat detection strategies and rules across diverse security technologies (SIEM, EDR, Cloud security tools). • Proactively hunt for novel and sophisticated threats within the enterprise environment, leveraging threat intelligence and forensic analysis. • Automate detection processes and workflows to enhance efficiency and reduce manual effort in threat identification. • Collaborate with threat intelligence teams to translate emerging threats and TTPs into actionable detection logic. Essential Requirements • 8+ years' experience in cyber security, with at least 4 years in detection engineering, threat detection or SOC engineering roles. • Proven experience designing or leading a detection engineering function in a large or regulated organisation. • Expert-level hands-on experience with Microsoft Sentinel (KQL, analytics rules, workbooks, watchlists, automation) and IBM QRadar (AQL, custom rules, building blocks, DSMs, reference sets). • Proven track record of intelligence-driven detection development , turning CTI into operational detections. • In-depth knowledge of MITRE ATT&CK, D3FEND, Cyber Kill Chain, Diamond Model, Pyramid of Pain and NIST CSF . • Experience with detection-as-code , Git-based version control and CI/CD pipelines. • Strong understanding of attacker tradecraft across Windows, Linux, cloud (Azure/M365), identity and network environments. • Scripting skills in Python and/or PowerShell . Highly Desirable • Banking or financial services experience. • Experience with Sigma , YARA and threat intelligence platforms (e.g., MISP, OpenCTI, Recorded Future). • Experience in purple teaming, adversary emulation or red team collaboration. • Experience with Microsoft Defender XDR, EDR platforms and SOAR tooling. • Background in threat hunting or cyber threat intelligence. Certifications (Preferred) • GIAC certifications such as GCDA, GCIA, GCTI, GCIH or GREM • Microsoft Certified: Security Operations Analyst Associate ( SC-200 ) • IBM QRadar certifications • CISSP , OSCP or equivalent Key Competencies • Strategic leadership: able to build a function from the ground up and align it with business risk. • Technical depth: expert-level detection development across Sentinel and QRadar. • Threat-informed mindset: thinks like an adversary and prioritises based on intelligence. • Stakeholder management: communicates detection posture clearly to executives, auditors and regulators. • Mentorship: develops talent and spreads good engineering practice across the team. • Analytical rigour: makes data-driven decisions supported by meaningful metrics. • Composure under pressure: offers steady, structured leadership during significant incidents. Education Bachelor's degree in Computer Science, Information Security, Engineering or a related field, or equivalent professional experience.