About this role
Salary: £100,000 - 100,000 per year
Requirements
- Extensive experience in threat detection and threat modelling
- Background in senior security operations or SOC roles
- Strong experience with Elastic Stack and Azure Sentinel
- Hands-on experience writing detection rules in KQL and EQL
- Deep understanding of AWS and Azure security, ideally in a global SaaS context
- Experience with automation tools such as Tines, Shuffle, or Tracecat
- Familiarity with MITRE ATT&CK or similar frameworks
- Extensive experience developing playbooks and handling incident response
- Strong communication skills and ability to work independently
- SOAR experience
- PowerShell and Python scripting skills
- Extensive experience with AWS cloud-native security tools such as CloudTrail, GuardDuty, and Security Hub
- Security certifications such as GIAC, CEH, or CISSP
- Experience working with MSSPs or external SOCs
Responsibilities
- Build and optimise threat detection capabilities in Elastic and Azure Sentinel
- Develop threat models for AWS and Azure across a suite of global SaaS products
- Create and maintain incident response playbooks
- Automate response playbooks
- Partner with our external SOC to refine detection strategies
- Perform threat hunting and analysis across large-scale cloud environments
- Tune rules to reduce false positives
- Document detection logic and playbook procedures
Technologies
- AWS
- Azure
- Cloud
- PowerShell
- Python
- Security
- DevOps
More
We are a global B2B SaaS organisation seeking a Senior Cloud Detection Engineer to take ownership of our cloud-native security threat detection and response capability. This role offers the opportunity to make a technical impact in high-scale cloud environments by building detections and automated response workflows. The position is fully remote, pays £100,000 per annum, and is offered as a six-month fixed-term contract.
last updated 46 week of 2026