Senior Threat-Led Detection Engineer

LA International Computer Consultants Ltd; Manchester; On-site; GBP 85,000 - 110,000; Full time

Job summary

LA International Computer Consultants Ltd is seeking a Senior Detection Engineer to design and improve threat-led detection across enterprise telemetry. You will convert threat intelligence and incident learnings into high-fidelity detections, covering endpoints, identities, cloud, networks and applications.

The role focuses on attacker behavior analytics, telemetry strategy and Detection-as-Code practices, with collaboration across Threat+ Hunting+ IR+ SOC teams to continuously enhance

Qualifications

• Design and develop threat-led detection content aligned to MITRE ATT&CK.
• Translate threat intelligence into detections across telemetry.
• Develop behavioral, risk-based and correlated detections across multiple domains.
• Continuously tune detection logic to reduce false positives.
• Assess coverage, identify telemetry gaps, and define monitoring requirements.
• Validate detections through attack simulations and adversary emulation.
• Maintain documentation, ownership, and Detection-as-Code practices.
• Collaborate with Threat Intelligence, Hunting, IR, Red Team and SOC.

Responsibilities

• Design, develop and maintain threat-led detection content aligned to MITRE ATT&CK and threat models.
• Translate threat intel, hunting findings and incident lessons into detections.
• Develop detections across endpoint, identity, cloud, network, email and apps.
• Tune and optimise detection logic to improve fidelity and reduce FP.
• Assess coverage, identify telemetry gaps and define monitoring needs.
• Validate detections via attack simulations and adversary emulation.
• Maintain detection content documentation, ownership and standards.
• Collaborate with Threat Intelligence, Hunting, IR, Red Team and SOC.
• Identify automation opportunities for SOC processes.
• Develop automation for testing, validation and reporting.
• Design AI-enabled hypotheses and automated rule creation pipeline.

Skills

Threat-led detection development

Behavioral analytics

ATT&CK mapping

Detection tuning

Validation and life-cycle management

Education

Bachelor's degree in Cyber Security, Computer Science, Digital Forensics, Information Security or equivalent

Tools

KQL

SPL

Sigma

Python

PowerShell

Microsoft Defender

CrowdStrike

Job description

LA International Computer Consultants Ltd is seeking a Senior Detection Engineer to design and improve threat-led detection across enterprise telemetry. You will convert threat intelligence and incident learnings into high-fidelity detections, covering endpoints, identities, cloud, networks and applications.

The role focuses on attacker behavior analytics, telemetry strategy and Detection-as-Code practices, with collaboration across Threat+ Hunting+ IR+ SOC teams to continuously enhance