Threat Detection Engineer — SIEM/EDR/NDR Specialist

ICE Clear Europe Limited; Greater London; Hybrid; GBP 70,000 - 120,000; Full time

Job summary

ICE Clear Europe Limited is seeking a security-focused Detection Engineer to design, tune, and maintain detection content across SIEM, EDR, and NDR platforms in a fast-moving environment.

You will map coverage to MITRE ATT&CK, integrate threat intelligence, and run focused hunts to uncover threats that evade controls. Collaboration with incident response and threat intel will be essential.

Qualifications

• Experience in threat detection, security operations, or threat hunting.
• Hands-on with SIEM, EDR, and NDR platforms, including writing and tuning detection logic.
• Working knowledge of a scripting language for automation (Python/PowerShell).
• Ability to investigate suspicious activity end to end: read logs, form a conclusion, and communicate it clearly.
• Familiarity with MITRE ATT&CK framework and adversary tradecraft.
• Solid understanding of OS internals, networking, and security telemetry.

Responsibilities

• Design, build, test, and maintain detection content across SIEM, EDR, and NDR platforms, documenting intent, data sources, and expected behavior.
• Own false positives, alert volume, and rule health for assigned detection areas.
• Map detection coverage to MITRE ATT&CK, identify gaps, and propose telemetry to close them.
• Convert threat intelligence into prioritized detection and hunting work; align with adversaries and techniques.
• Develop and execute focused hunts to discover threats evading controls and produce durable detections.
• Address red team gaps; track to closure, modify detections, and validate in retests.
• Validate health of log sources and onboard/update SIEM sources promptly.
• Apply a developer mindset to automation and tooling using Python/PowerShell.

Skills

Threat detection

Security operations

Threat hunting

MITRE ATT&CK reasoning

OS & network telemetry

Education

University degree in Engineering, MIS, CIS, or related discipline; or equivalent years of experience

Tools

Splunk

Elasticsearch

Tanium

CrowdStrike

SentinelOne

Git workflows

PowerShell

Python

Job description

ICE Clear Europe Limited is seeking a security-focused Detection Engineer to design, tune, and maintain detection content across SIEM, EDR, and NDR platforms in a fast-moving environment.

You will map coverage to MITRE ATT&CK, integrate threat intelligence, and run focused hunts to uncover threats that evade controls. Collaboration with incident response and threat intel will be essential.