Senior Threat Detection Architect | Cloud & SIEM

Academic Key; Greater London; Vor Ort; GBP 90.000 - 140.000; Vollzeit

Zusammenfassung

Checkout.com in London is seeking a Senior Detection & Threat Engineer to own and evolve the company’s threat detection and threat-hunting capability. This role defines what “good” looks like for detection and progressively engineers it as capability shifts into Cyber Security.

You will partner with Security Operations, GRC and Engineering, setting standards and taking ownership of the most complex detection and threat engineering work.

Qualifikationen

• Proven experience in detection engineering, threat hunting, or advanced SOC roles.
• Deep understanding of attacker tradecraft and intrusion techniques.
• Hands-on experience building detection logic in modern SIEM platforms (e.g. Sentinel).
• Proficiency with scripting (Python, KQL) to build detection pipelines and automation.

Aufgaben

• Engineer high-fidelity threat detections across endpoint, identity, cloud, and SaaS.
• Define detection standards and quality thresholds for Security Operations.
• Conduct proactive threat hunting based on attacker behaviour, not vendor alerts.
• Translate threat intelligence and incident learnings into durable, reusable detections.
• Map detections to MITRE ATT&CK and real-world attack paths.
• Reduce alert fatigue through logic refinement and contextual enrichment.
• Advise during high-severity security incidents; contribute to runbooks and escalation playbooks.
• Drive the transition of advanced detection capability into Cyber Security ownership.

Kenntnisse

Threat detection

Threat hunting

SOC experience

Python

KQL

SIEM

Cloud security

Attacker tradecraft

MITRE ATT&CK

Tools

Sentinel

Threat intelligence platforms

Jobbeschreibung

Checkout.com in London is seeking a Senior Detection & Threat Engineer to own and evolve the company’s threat detection and threat-hunting capability. This role defines what “good” looks like for detection and progressively engineers it as capability shifts into Cyber Security.

You will partner with Security Operations, GRC and Engineering, setting standards and taking ownership of the most complex detection and threat engineering work.