Hybrid Cyber Defence Engineer - Threat Detection & Cloud

Intact Insurance UK; England; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Annual discretionary bonus

Up to 11% pension contributions

Hybrid working

25 days annual leave + bank holidays +

Health & wellbeing + virtual GP

Career development and mentoring

Inclusive culture + employee networks

Share investment options

Job summary

Intact Insurance is hiring a Cyber Defence Engineer to strengthen our cyber defence capabilities across cloud and on‑prem environments. You will engineer, configure and optimise security tooling, focusing on threat detection and telemetry pipelines to stay ahead of active threats.

The role requires strong SIEM experience (Sentinel/Defender) with custom queries, KQL proficiency, and solid Azure security knowledge. We offer hybrid working and a supportive, inclusive culture.

Qualifications

• Strong experience with SIEM platforms (Sentinel/Defender) including the development of custom queries, analytics and alerting.
• Proficiency in Kusto Query Language (KQL) for detection engineering, analysis and threat hunting.
• Experience with cloud environments including Azure and related security services.
• Strong understanding of logging, telemetry, monitoring and analytics across cloud and on premises systems.
• Practical experience with threat detection tooling, endpoint security platforms and cloud native security tools.
• Engineering experience with exposure management platforms such as vulnerability scanners and SAST/DAST tools.

Responsibilities

• Developing, maintaining and improving threat detection logic across SIEM, endpoint and cloud monitoring tools.
• Ensuring logging and telemetry pipelines are correctly engineered, complete and validated.
• Enhancing visibility and analytics to ensure alignment with current threat activity.
• Supporting the development of detection as code and automate rule testing and deployment.

Skills

SIEM

Sentinel/Defender

KQL

Azure Cloud Security

Logging & Telemetry

Threat Detection Tools

Vulnerability Scanners

Tools

SAST/DAST Tools

Endpoint Security Tools

Cloud Native Security Tools

Job description

Intact Insurance is hiring a Cyber Defence Engineer to strengthen our cyber defence capabilities across cloud and on‑prem environments. You will engineer, configure and optimise security tooling, focusing on threat detection and telemetry pipelines to stay ahead of active threats.

The role requires strong SIEM experience (Sentinel/Defender) with custom queries, KQL proficiency, and solid Azure security knowledge. We offer hybrid working and a supportive, inclusive culture.