Detection Engineer & Threat Hunter — SecOps

Starling; Manchester; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Annual leave 25 days

Private Medical Insurance

Pension scheme

Life insurance

Cycle to Work

Job summary

Starling Bank is seeking a Detection Engineer and Threat Hunter to join our Security Operations team. You will proactively defend customers, assets, and systems by developing, tuning, and maintaining detection rules, and by conducting intelligence-driven threat hunts across cloud, SaaS, and endpoints.

You will collaborate with teams to improve detective controls, participate in Purple Team exercises, and provide incident response SME support.

Qualifications

• 3+ years in a technical security role focusing on detection, hunting, or incident response.
• Hands-on experience with SIEM platforms and threat hunting methodologies.
• Solid cloud security knowledge across AWS, GCP, and Azure.
• Experience with EDR tools and malware analysis concepts.
• Programming or scripting for security automation is beneficial.

Responsibilities

• Design, build, test, and maintain high-fidelity detection rules and analytics.
• Proactively hunt for attacker TTPs across cloud, SaaS, and endpoints.
• Collaborate in Purple Team exercises to improve detection and response.
• Act as SME during security incidents with deep technical analysis.
• Integrate threat intelligence to inform detection strategies.

Skills

Detection engineering

Threat hunting

Incident response

Threat intelligence

MITRE ATT&CK

SIEM experience

Cloud security

EDR tools

OS fundamentals

Automation scripting

Container security

SOAR knowledge

Malware analysis

Tools

Splunk

Elastic

Google SecOps

Sentinel

CrowdStrike

Cortex XDR

Kubernetes

Docker

Job description

Starling Bank is seeking a Detection Engineer and Threat Hunter to join our Security Operations team. You will proactively defend customers, assets, and systems by developing, tuning, and maintaining detection rules, and by conducting intelligence-driven threat hunts across cloud, SaaS, and endpoints.

You will collaborate with teams to improve detective controls, participate in Purple Team exercises, and provide incident response SME support.