Cyber Defence Engineer: Threat Detection & Cloud Security

Intact Insurance (previously RSA); United Kingdom; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Annual discretionary bonus

Up to 11% pension contributions

Hybrid working

25 days annual leave + bank holidays +

Health & wellbeing + virtual GP

Career development and mentoring

Inclusive culture + employee networks

Share investment options

Job summary

Intact Insurance is transforming its cyber defence capabilities. This permanent role offers you a chance to shape the security posture of our cloud and on-prem environments.

As a Cyber Defence Engineer, you will build and refine threat detection across SIEM, endpoints and cloud services, delivering robust telemetry and analytics. You’ll work with Sentinel/Defender, develop detection as code, test rules, and automate deployment, while staying aligned with current threat activity.

Qualifications

• Strong experience with SIEM platforms (Sentinel/Defender) and custom queries.
• Proficiency in KQL for detection engineering and threat hunting.
• Experience with Azure and security services.
• Understanding of logging, telemetry, monitoring and analytics across cloud and on-premise systems.
• Experience with threat detection tooling, endpoint security platforms, and cloud-native security tools.
• Exposure management platforms including vulnerability scanners and SAST/DAST tools.

Responsibilities

• Developing, maintaining and improving threat detection logic across SIEM, endpoint and cloud monitoring tools.
• Ensuring logging and telemetry pipelines are correctly engineered, complete and validated.
• Enhancing visibility and analytics to align with current threat activity.
• Supporting the development of detection as code and automating rule testing and deployment.

Skills

SIEM expertise

KQL

Azure

Logging/telemetry/analytics

Threat detection tooling

Endpoint security

Cloud security tools

Tools

Vulnerability scanners

SAST/DAST tools

Job description

Intact Insurance is transforming its cyber defence capabilities. This permanent role offers you a chance to shape the security posture of our cloud and on-prem environments.

As a Cyber Defence Engineer, you will build and refine threat detection across SIEM, endpoints and cloud services, delivering robust telemetry and analytics. You’ll work with Sentinel/Defender, develop detection as code, test rules, and automate deployment, while staying aligned with current threat activity.