Senior Threat Detection Engineer

3-5 years of experience as a detection engineer, security operations analyst, or incident responder, with a proven track record of triaging and responding to cyber threats.

Demonstrated knowledge of threat actor techniques, vulnerabilities, and exploits (e.g., MITRE ATT&CK framework), along with how those present themselves within various log sources and artifacts.

Extensive experience investigating and hunting threats, as well as building robust detection logic using modern SIEM and log aggregation platforms such as Splunk ES, Google SecOps, and Sumologic in medium to large enterprise environments.

Strong practical experience with software development skills, GitHub, and CI/CD pipelines. Familiarity with automation tools and version control (e.g., Git, Cloudbees, Bitbucket, Bitbucket pipelines) to treat detection-as-code.

Deep understanding of common enterprise technologies and their logging capabilities, including Cloud platforms (AWS/GCP/Azure), Firewalls, EDR, and Proxies.

Curious and analytical mindset with a strong ability to question the status quo, solve complex problems creatively, and continuously improve detection fidelity.

Familiarity or hands-on experience utilising cutting-edge AI coding assistants and command-line LLM tools (such as Claude Code or GitHub Copilot) to accelerate detection engineering, draft parsing scripts, translate legacy rules, or analySe complex security data is desirable.