Detection Engineer Full Time

Talent Smart Limited

Detection Engineer

• Sheffield or London – 1-2 days per week onsite
• Initial 6-month contract
• £600 per day via umbrella
• Inside IR35

We’re working with a leading bank to appoint Detection Engineers to join a growing internal defensive security team.

The team is expanding its dedicated detection capability, moving from detection engineering being a secondary responsibility within the Cloud function to a specialist, Full time discipline. You’ll work as part of a global team across the UK, Poland and Mexico.

The role is focused entirely on defensive security and threat hunting, with an emphasis on building high-quality detections rather than simply increasing volume.

Key responsibilities:

• Develop high-quality detection use cases from external threat intelligence and internal security data
• Analyse intelligence and translate it into effective detections for the organisation
• Use Red Team outputs to identify gaps, understand attack techniques and determine where to detect malicious activity
• Conduct threat hunting and identify opportunities to improve defensive coverage
• Work closely with security and technology teams to understand the environment and optimise detection capability
• Deliver detection engineering through Agile, sprint-based and Scrum ways of working

Requirements:

• 3-5 years’ experience across technology operations, development or security
• Experience with AI is hugely beneficial and a key area of interest for the team.
• Multi-cloud experience, ideally with AWS, Azure, and GCP.
• Hands-on experience writing and developing security detections
• Strong understanding of threat hunting and defensive security
• Experience working with threat intelligence and translating intelligence into actionable detections
• Experience within a large financial services organisation or similarly complex, highly regulated environment
• Comfortable working in an Agile/Scrum delivery environment
• Curious, technically minded and hungry to investigate how attackers operate and how they can be detected

More details available on successful application.