Cyber Security Consultant – Detection Engineering

JR United Kingdom; London; On-site; GBP 50,000 - 80,000; Full time

Job summary

A leading company in the Cyber Security sector seeks a skilled Detection Engineer to enhance their threat detection capabilities. The role involves developing high-fidelity detection logic, working with popular tools like Splunk and Sentinel, and participating in threat modeling exercises. Candidates should possess a strong background in security operations, detection engineering, and must meet qualifications aligned with industry standards.

Qualifications

• 3+ years of experience in security operations or related field.
• Proficiency in Splunk, KQL, Sigma, etc.
• Familiarity with the threat detection lifecycle.

Responsibilities

• Design and develop detection logic across various security platforms.
• Conduct threat modeling and assess detection effectiveness.
• Reduce false positives through tuning and contextual awareness.

Skills

Security Operations

Detection Engineering

Threat Hunting

Query Languages

MITRE ATT&CK Framework

Tools

SIEM Platforms

EDR Tools

Cloud Security Services

Job description

Social network you want to login/join with:

Cyber Security Detection Engineer, london

col-narrow-left

Client:

RiverSafe

Location:

london, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

5

Posted:

28.06.2025

Expiry Date:

12.08.2025

col-wide

Job Description:

We are looking for a skilled Detection Engineer to join our Cyber Security team. In this role, you will be responsible for developing and maintaining high-fidelity threat detections across our security platforms. You’ll work at the intersection of threat intelligence, telemetry and security operations to build scalable, reliable and effective detection capabilities.

Key Responsibilities

• Design, develop and deploy detection logic across SIEM, EDR and cloud security platforms.
• Build detections aligned with frameworks such as MITRE ATT&CK and continuously tune for accuracy and performance.
• Conduct threat modelling and participate in purple team exercises to assess and improve detection effectiveness.
• Use Detection-as-Code principles to manage detection rules via version control, CI/CD pipelines and automated testing frameworks.
• Reduce false positives through tuning, enrichment and contextual awareness.

Skills

• 3+ years of experience in security operations, detection engineering, threat hunting, or a related Cyber Security field.
• Proficiency in query languages such as SPL (Splunk), KQL (Microsoft), Sigma, or similar.
• Experience with SIEM platforms (e.g. Splunk, Sentinel, Elastic), EDR tools (e.g. CrowdStrike, SentinelOne), and/or cloud-native security services (e.g. AWS GuardDuty, GCP Chronicle).
• Ability to create and iterate on detection content (e.g. SIEM rules, correlation searches and detection-as-code signatures) to proactively identify malicious behaviour and improve threat visibility and reduce false positives
• Familiarity with MITRE ATT&CK framework and threat detection lifecycle.