Risk Engineer (Permanent) in London

Energy Jobline ZR; City Of London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A technology recruitment agency is seeking a Threat Detection Engineer to enhance detection capabilities within a secure SOC. You will design and improve detection rules in Splunk, lead initiatives, and advise on security tooling. Advanced experience with Splunk and SIEM use cases is required, along with strong communication skills. This role offers a hybrid working model in the UK, and applications are encouraged with an updated CV.

Qualifications

• Proven experience as a Threat Detection Engineer or in a similar role.
• Advanced hands-on experience with Splunk and Enterprise Security.
• Ability to create and enhance detection use cases.

Responsibilities

• Design detection rules in Splunk.
• Develop and maintain SIEM use cases.
• Lead technical initiatives in the Threat Detection team.
• Advise on SIEM architecture and security tooling.
• Manage and prioritize detection tasks.

Skills

Splunk

SPL development

SIEM use case development

Cybersecurity principles

Communication skills

Job description

Job Title

Threat Detection Engineer

Location

Brussels, Amsterdam, or London - Hybrid

Duration

12‑Month Extendable Freelance Mission (Extendable)

Start Date

October / November 2025

As a Threat Detection Engineer, you’ll play a vital part in enhancing and maintaining advanced detection capabilities within a secure, large‑scale SOC. Your expertise in Splunk and use case development will directly influence how threats are detected, analyzed, and responded to across the organization.

Responsibilities

• Design, build, and fine‑tune detection rules in Splunk (SPL, ES, CIM, and log normalization).
• Develop, document, and maintain SIEM use cases that strengthen the organization’s detection framework.
• Lead and guide technical initiatives within the Threat Detection team to ensure continuous improvement.
• Advise on SIEM architecture and security tooling, bringing deep technical insight to detection strategies.
• Manage and prioritize detection tasks, balancing proactive threat hunting with operational response needs.

What You Bring

• Proven experience as a Threat Detection Engineer or similar role within a SOC environment.
• Advanced hands‑on experience with Splunk, including SPL development and Enterprise Security (ES).
• Demonstrated ability to create and enhance use cases that detect and mitigate evolving threats.
• Solid understanding of cybersecurity principles, frameworks, and best practices.
• Strong communication skills in English; able to translate technical detection logic into actionable insights.

This will be an Inside IR35 Role.

Please attach updated CV for immediate consideration!

If you are interested in applying for this job, please press the Apply Button and follow the application process. Energy Jobline wishes you the very best of luck in your next career move.