Principal Security & Detection Engineer

• Detection Engineering & Threat Hunting Develop and maintain security detections across the technology stack. Execute hypothesis-driven threat hunts and translate attacker TTPs into practical detections. Map capabilities to MITRE ATT&CK and identify coverage gaps.
• Develop and maintain security detections across the technology stack.
• Execute hypothesis-driven threat hunts and translate attacker TTPs into practical detections.
• Map capabilities to MITRE ATT&CK and identify coverage gaps.
• Fraud Monitoring Platform Development Lead the development of the fraud and abuse monitoring platform. Design analytics, detection logic, and integrations to identify abuse patterns within business applications.
• Lead the development of the fraud and abuse monitoring platform.
• Design analytics, detection logic, and integrations to identify abuse patterns within business applications.
• Security Automation & SOAR Design and develop automation to improve SOC efficiency. Build automated enrichment, investigation, and response workflows (SOAR playbooks).
• Design and develop automation to improve SOC efficiency.
• Build automated enrichment, investigation, and response workflows (SOAR playbooks).
• Security Research & Development Conduct independent research into emerging threats, vulnerabilities, and attack techniques. Reproduce exploits in a controlled environment to validate findings.
• Conduct independent research into emerging threats, vulnerabilities, and attack techniques.
• Reproduce exploits in a controlled environment to validate findings.

• Provide technical leadership and establish standards for engineering activities.
• Conduct quality reviews and act as a senior technical decision-maker.
• Operate with a high degree of autonomy, owning projects from concept to implementation.

Technical En vironment

The successful candidate should be comfortable working across a broad security and software engineering environment, including:

• SIEM
• EDR/XDR technologies
• SOAR and security automation
• Threat hunting
• Vulnerability research and exploitation
• Network security and networking technologies
• Python
• SQL
• APIs and system integrations

• Minimum 3 years of professional experience in cybersecurity, software development, or a combination of both with a strong security focus.
• Demonstrated experience developing software, automation or security tooling.
• Strong Python development capability.
• Strong understanding of security monitoring and detection engineering.
• Experience working with SIEM, security analytics and large-scale security telemetry.
• Experience designing and developing integrations between security platforms and other systems.
• Strong understanding of networking and network security principles.
• Ability to translate security research into practical detections, automation or engineering solutions.
• Strong analytical and problem-solving ability.
• Excellent technical documentation skills.
• Ability to work independently with minimal supervision.
• Demonstrated initiative and a willingness to research unfamiliar technologies and problems.
• Ability to manage multiple technical projects and prioritise work effectively.

• A relevant degree, diploma or equivalent formal qualification is preferred.
• However, demonstrated professional experience and technical capability will be considered equally important. Candidates who can demonstrate strong practical cybersecurity or software-development experience without a traditional academic background will be considered.
• Industry certifications are not a primary requirement for this position. Demonstrated technical ability, initiative, engineering capability and practical experience are more important.