Detection Engineer & Threat Hunter — Hybrid SecOps

Starling; Cardiff; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

25 days holiday

Private Medical Insurance

Pension scheme

Life insurance

Volunteer time

Cycle to Work

Wellness platform

Job summary

Starling Bank is hiring a Detection Engineer and Threat Hunter to join our Security Operations team. You will proactively identify threats, develop detection rules, and perform intelligence-driven threat hunts across cloud, SaaS, and endpoints.

You will collaborate with Adversarial Simulation and incident response teams to strengthen our detective controls and improve defenses for Starling's customers and assets.

Qualifications

• 3+ years in technical security roles such as detection engineering or threat hunting.
• Strong understanding of MITRE ATT&CK to prioritize detective controls.
• Hands-on with SIEM platforms for rule creation and analytics.
• Experience hunting threats across cloud, SaaS, and endpoints.
• Knowledge of AWS, GCP and Azure security and detection strategies.

Responsibilities

• Design, build, test, and maintain high-fidelity detection rules.
• Conduct intelligence-driven threat hunts across cloud and endpoints.
• Collaborate in Purple Team exercises to improve detection and response.
• Provide incident response SME support with deep technical analysis.
• Integrate threat intelligence to guide detection strategies.
• Work with Security Operations to uplift overall posture.
• Document detection rules and hunting playbooks.

Skills

Threat analysis models

SIEM expertise

Threat hunting

Cloud security

EDR proficiency

OS internals

Detector logic design

Strong analytics

Collaboration

Proactive mindset

Tools

Splunk

Google SecOps

Elastic

Sentinel

CrowdStrike

SentinelOne

Cortex XDR

Docker

Kubernetes

Job description

Starling Bank is hiring a Detection Engineer and Threat Hunter to join our Security Operations team. You will proactively identify threats, develop detection rules, and perform intelligence-driven threat hunts across cloud, SaaS, and endpoints.

You will collaborate with Adversarial Simulation and incident response teams to strengthen our detective controls and improve defenses for Starling's customers and assets.