Threat Detection Engineer — SIEM & MITRE Expert (Hybrid)

Free-Work UK; Reading; Hybrid; GBP 70,000 - 95,000; Full time

Benefits offered by this job

Private healthcare

Share scheme

Pension

Job summary

CGI is seeking a Cyber Security Detection Engineer to design, develop and optimise advanced SIEM detection rules across complex client environments. You will translate threat intelligence into actionable detections, working closely with SOC teams to improve threat visibility and incident response.

Based in Reading, Berkshire (hybrid) with eligibility for UK Security Check clearance, you will mentor colleagues and contribute to engineering best practices while delivering practical security

Qualifications

• Hands-on experience in cyber threat detection engineering across complex security environments
• Ability to design, implement and optimise SIEM detection rules
• Experience with security operations centre (SOC) monitoring and threat intel integration

Responsibilities

• Design, develop, test and tune SIEM detection rules across platforms
• Translate threat intel into detection use cases
• Provide technical security consultancy to clients
• Lead detection engineering activities on enterprise-scale projects
• Collaborate with SOC teams and stakeholders to strengthen detection coverage
• Mentor colleagues and share engineering best practices
• Maintain detection use case libraries and documentation
• Identify opportunities to automate detection engineering workflows

Skills

Detection Eng

SIEM Rules

SOC Operations

Threat Intelligence

MITRE ATT&CK

Agile & Git

Security Architecture

Technical Consultancy

Problem Solving

Independent Delivery

Tools

Microsoft Sentinel

FortiSIEM

Elastic

ArcSight

Job description

CGI is seeking a Cyber Security Detection Engineer to design, develop and optimise advanced SIEM detection rules across complex client environments. You will translate threat intelligence into actionable detections, working closely with SOC teams to improve threat visibility and incident response.

Based in Reading, Berkshire (hybrid) with eligibility for UK Security Check clearance, you will mentor colleagues and contribute to engineering best practices while delivering practical security