Senior Cloud Threat Detection Engineer - AWS/Azure, Elastic

Smart Sourcer Limited; United Kingdom; Sur place; GBP 70 000 - 110 000; Plein temps

Résumé du poste

Smart Sourcer Limited in the United Kingdom is seeking a Senior Cloud Detection Engineer to own cloud-native security threat detection and response for global SaaS products. You will build and optimise threat detection capabilities using Elastic Stack and Azure Sentinel, design threat models for AWS and Azure, and develop incident response playbooks.

Ideal candidates have hands-on experience with KQL and EQL, SOAR tooling, automation (PowerShell/Python), and collaboration with MSSPs or external

Qualifications

• Background in security operations or SOC roles.
• Hands-on detection rule writing in KQL & EQL.
• Experience with Elastic Stack and Azure Sentinel.

Responsabilités

• Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel.
• Develop Threat Models for AWS & Azure and our global SaaS products.
• Create and maintain incident response playbooks.
• Automate response actions with the Security Team.
• Partner with our external SOC to refine detection strategies.
• Perform threat hunting and analysis across large-scale cloud environments.
• Tune rules to reduce false positives.
• Document detection logic and playbook procedures.

Connaissances

Threat Detection

Threat Hunting

Incident Response

Automation & Orchestration

PowerShell

Python

SOC Operations

Communication

Outils

Elastic Stack

Azure Sentinel

KQL

EQL

CloudTrail

GuardDuty

Security Hub

Tines

Shuffler

Tracecat

Description du poste

Smart Sourcer Limited in the United Kingdom is seeking a Senior Cloud Detection Engineer to own cloud-native security threat detection and response for global SaaS products. You will build and optimise threat detection capabilities using Elastic Stack and Azure Sentinel, design threat models for AWS and Azure, and develop incident response playbooks.

Ideal candidates have hands-on experience with KQL and EQL, SOAR tooling, automation (PowerShell/Python), and collaboration with MSSPs or external