Cyber Threat Engineer: Threat Hunting, SIEM & SOAR

Paymentsense; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Dojo in London is seeking a Cyber Threat Engineer to join our Cyber Defence Centre, bridging security engineering and incident response. You will triage alerts, conduct threat hunting, and maintain SIEM and SOAR tooling to strengthen our security posture.

You will also work on IaC pipelines, build detection rules, and mentor teammates while producing insightful metrics and dashboards. A strong background in security engineering or incident response and cloud experience are essential.

Qualifications

• Proven background in Security Engineering or Incident Response in fast-paced environments.
• Hands-on experience with SIEM and SOAR platforms; Google SecOps preferred.
• Scripting proficiency in Python or Go; managing IaC pipelines.
• Experience with cloud platforms, especially GCP and AWS.
• Understanding of threat actors, TTPs, and a structured approach to root cause analysis.
• Strong collaboration to work with cross-functional teams.

Responsibilities

• Triage alerts and coordinate end-to-end security incident management.
• Conduct proactive threat hunting across networks, endpoints, and cloud.
• Maintain and optimize security tooling (SIEM, EDR, SOAR).
• Update IaC pipelines to enforce security configurations.
• Build high-fidelity detection rules and design SOAR playbooks.
• Identify visibility gaps and engineer improvements for SOC.
• Mentor teammates in automation and produce metrics dashboards.

Skills

Security engineering

Incident response

SIEM

SOAR

Python/Go scripting

IaC pipelines

Cloud platforms (GCP/AWS)

Threat hunting

Root cause analysis

Collaboration

Tools

SIEM

SOAR

IaC pipelines

Job description

Dojo in London is seeking a Cyber Threat Engineer to join our Cyber Defence Centre, bridging security engineering and incident response. You will triage alerts, conduct threat hunting, and maintain SIEM and SOAR tooling to strengthen our security posture.

You will also work on IaC pipelines, build detection rules, and mentor teammates while producing insightful metrics and dashboards. A strong background in security engineering or incident response and cloud experience are essential.