Lead Threat Detection Engineer

Lead Threat Detection Engineer| London | Up to £120k + Bonus I'm working with a leading global fintech on a senior hire into a newly established security function. This is a hands-on role for someone who wants to go beyond responding to alerts and take real ownership of how threat detection and intelligence is built, automated and improved across a large-scale, multi-cloud environment.

You'll be joining at a point where the core security tooling is already in place, but there's significant scope to define what best-in-class looks like.

What you'll be doing

Own and improve the threat detection lifecycle across a complex cloud estate Build and enhance SIEM detection rules, use cases and monitoring Automate manual detection and remediation processes Develop threat intelligence and threat-hunting capabilities Improve security monitoring across AWS, GCP and Azure Work closely with engineering teams to turn security findings into scalable technical improvements Review existing tooling and influence future technology decisions Provide technical leadership and help upskill others across the security function

What we're looking for

Experience building detections rather than purely responding to SOC alerts Strong SIEM experience – Microsoft Sentinel, Splunk or similar Cloud security experience across AWS, GCP and/or Azure KQL, SPL or similar querying experience Python scripting / security automation Terraform / Infrastructure as Code exposure Experience with threat intelligence or threat hunting Strong ownership and stakeholder communication skills This would particularly suit someone from a fintech, payments or financial‐services environment who wants the opportunity to shape a growing security capability rather than inherit a finished one. Up to £120k base + discretionary bonus

Report this job