Threat-Led Detection Engineer (SIEM & Automation)

Gazelle Global Consulting Limited; Royal Leamington Spa, Manchester, Warrington; Hybrid; GBP 60,000 - 80,000; Part time

Job summary

Gazelle Global Consulting Limited is seeking a SOC Detection Engineer to fortify threat-detection capabilities within a large enterprise. The role focuses on threat-led detection engineering, translating threat intel and investigation findings into precise detection logic, and improving visibility across endpoint, identity, cloud and network environments. Hybrid work pattern applies with 3 days in office.

Qualifications

• Experience in threat-led detection engineering.
• Ability to translate threat intel into detections.
• Familiarity with SIEM platforms and detection tooling.

Responsibilities

• Translate threat intelligence and hunter findings into detection logic.
• Develop and validate detections across enterprise environments.
• Tune detections to reduce false positives and improve visibility.

Skills

Threat-led detection engineering

MITRE ATT&CK mapping

Threat intelligence

Detection development (KQL/SPL/Sigma)

Python automation

PowerShell automation

Security telemetry

Detection tuning & false positives

Detection-as-Code

Adversary emulation

SIEM platforms (Microsoft Sentinel,Spl

Job description

Gazelle Global Consulting Limited is seeking a SOC Detection Engineer to fortify threat-detection capabilities within a large enterprise. The role focuses on threat-led detection engineering, translating threat intel and investigation findings into precise detection logic, and improving visibility across endpoint, identity, cloud and network environments. Hybrid work pattern applies with 3 days in office.