Senior Threat Detection Architect

Checkout.com; Greater London; Hybride; GBP 90 000 - 130 000; Plein temps

Résumé du poste

Checkout.com is seeking a senior threat detection engineer who will own and evolve the company’s threat detection and hunting capability. This role defines what good looks like for detection and increasingly engineers it as capability shifts into Cyber Security.

You will partner closely with Security Operations, GRC and Engineering—setting standards, direction and expectations—while taking ownership of the most complex, high‑value detection work and threat engineering.

Qualifications

• Proven experience in detection engineering, threat hunting, or advanced SOC roles.
• Deep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycle.
• Hands-on experience building detection logic in modern SIEM platforms (e.g. Sentinel).
• Proficient in scripting and programming (Python, KQL) to build detection pipelines.
• Willingness to challenge bad detections, weak assumptions, and vanity metrics.

Responsabilités

• Engineering high-fidelity threat detections across endpoint, identity, cloud, and SaaS
• Defining detection standards, principles, and quality thresholds for Security Operations
• Conducting proactive threat hunting based on attacker behaviour, not vendor alerts
• Translating threat intelligence and incident learnings into durable, reusable detections
• Mapping detections to MITRE ATT&CK and real-world attack paths
• Reducing alert fatigue through logic refinement, correlation, and contextual enrichment
• Advising and supporting during high-severity security incidents; contribute to runbooks and escalation playbooks
• Driving the transition of advanced detection capability into Cyber Security ownership

Connaissances

Threat detection

Threat hunting

SOC experience

SIEM

Python

KQL

Cloud detection

Threat intel

Outils

Sentinel

Description du poste

Checkout.com is seeking a senior threat detection engineer who will own and evolve the company’s threat detection and hunting capability. This role defines what good looks like for detection and increasingly engineers it as capability shifts into Cyber Security.

You will partner closely with Security Operations, GRC and Engineering—setting standards, direction and expectations—while taking ownership of the most complex, high‑value detection work and threat engineering.