Cyber Security Consultant – Detection Engineering

JR United Kingdom; Slough; On-site; GBP 40,000 - 60,000; Full time

Job summary

A leading company in cybersecurity is seeking a Cyber Security Detection Engineer based in Slough. In this pivotal role, you will design and develop threat detection capabilities, work closely with threat intelligence, and utilize modern methodologies to enhance security operations. The ideal candidate will have significant experience in detection engineering and a deep understanding of cybersecurity principles.

Qualifications

• 3+ years of experience in security operations, detection engineering, or a related Cyber Security field.
• Proficiency in query languages such as SPL, KQL, or similar.
• Experience with SIEM platforms, EDR tools, and cloud-native security services.

Responsibilities

• Design, develop, and deploy detection logic across SIEM and EDR platforms.
• Conduct threat modelling and participate in purple team exercises.
• Reduce false positives through tuning and contextual awareness.

Skills

Security operations

Detection engineering

Threat hunting

Query languages

SIEM platforms

EDR tools

Threat detection lifecycle knowledge

Job description

Social network you want to login/join with:

Cyber Security Detection Engineer, slough

col-narrow-left

Client:

RiverSafe

Location:

slough, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

5

Posted:

28.06.2025

Expiry Date:

12.08.2025

col-wide

Job Description:

We are looking for a skilled Detection Engineer to join our Cyber Security team. In this role, you will be responsible for developing and maintaining high-fidelity threat detections across our security platforms. You’ll work at the intersection of threat intelligence, telemetry and security operations to build scalable, reliable and effective detection capabilities.

Key Responsibilities

• Design, develop and deploy detection logic across SIEM, EDR and cloud security platforms.
• Build detections aligned with frameworks such as MITRE ATT&CK and continuously tune for accuracy and performance.
• Conduct threat modelling and participate in purple team exercises to assess and improve detection effectiveness.
• Use Detection-as-Code principles to manage detection rules via version control, CI/CD pipelines and automated testing frameworks.
• Reduce false positives through tuning, enrichment and contextual awareness.

Skills

• 3+ years of experience in security operations, detection engineering, threat hunting, or a related Cyber Security field.
• Proficiency in query languages such as SPL (Splunk), KQL (Microsoft), Sigma, or similar.
• Experience with SIEM platforms (e.g. Splunk, Sentinel, Elastic), EDR tools (e.g. CrowdStrike, SentinelOne), and/or cloud-native security services (e.g. AWS GuardDuty, GCP Chronicle).
• Ability to create and iterate on detection content (e.g. SIEM rules, correlation searches and detection-as-code signatures) to proactively identify malicious behaviour and improve threat visibility and reduce false positives
• Familiarity with MITRE ATT&CK framework and threat detection lifecycle.