Cyber Security Consultant – Detection Engineering

JR United Kingdom; City Of London; On-site; GBP 60,000 - 90,000; Full time

Job summary

A leading company seeks a Cyber Security Detection Engineer to enhance threat detection capabilities. The successful candidate will develop and maintain high-fidelity threat detections across platforms, utilizing skills in security operations and detection engineering. This role will involve working closely with threat intelligence and security operations to create scalable and effective detection strategies.

Qualifications

• 3+ years of experience in Cyber Security roles.
• Proficiency in languages like SPL and KQL.
• Ability to build detection logic aligned with frameworks.

Responsibilities

• Develop detection logic across various platforms.
• Tune detections for accuracy and performance.
• Conduct threat modeling to improve detection effectiveness.

Skills

Security operations

Detection engineering

Threat hunting

Query languages

Knowledge of MITRE ATT&CK

Tools

SIEM

EDR tools

Cloud security services

Job description

Social network you want to login/join with:

Cyber Security Detection Engineer, london (city of london)

col-narrow-left

Client:

RiverSafe

Location:

london (city of london), United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

3

Posted:

27.06.2025

Expiry Date:

11.08.2025

col-wide

Job Description:

We are looking for a skilled Detection Engineer to join our Cyber Security team. In this role, you will be responsible for developing and maintaining high-fidelity threat detections across our security platforms. You’ll work at the intersection of threat intelligence, telemetry and security operations to build scalable, reliable and effective detection capabilities.

Key Responsibilities

• Design, develop and deploy detection logic across SIEM, EDR and cloud security platforms.
• Build detections aligned with frameworks such as MITRE ATT&CK and continuously tune for accuracy and performance.
• Conduct threat modelling and participate in purple team exercises to assess and improve detection effectiveness.
• Use Detection-as-Code principles to manage detection rules via version control, CI/CD pipelines and automated testing frameworks.
• Reduce false positives through tuning, enrichment and contextual awareness.

Skills

• 3+ years of experience in security operations, detection engineering, threat hunting, or a related Cyber Security field.
• Proficiency in query languages such as SPL (Splunk), KQL (Microsoft), Sigma, or similar.
• Experience with SIEM platforms (e.g. Splunk, Sentinel, Elastic), EDR tools (e.g. CrowdStrike, SentinelOne), and/or cloud-native security services (e.g. AWS GuardDuty, GCP Chronicle).
• Ability to create and iterate on detection content (e.g. SIEM rules, correlation searches and detection-as-code signatures) to proactively identify malicious behaviour and improve threat visibility and reduce false positives
• Familiarity with MITRE ATT&CK framework and threat detection lifecycle.