Lead Threat Detection Engineer

Lead Threat Detection Engineer| London | Up to £120k + Bonus

I'm working with a leading global fintech on a senior hire into a newly established security function.

This is a hands-on role for someone who wants to go beyond responding to alerts and take real ownership of how threat detection and intelligence is built, automated and improved across a large-scale, multi-cloud environment.

You’ll be joining at a point where the core security tooling is already in place, but there’s significant scope to define what best-in-class looks like.

What you’ll be doing:

• Own and improve the threat detection lifecycle across a complex cloud estate
• Build and enhance SIEM detection rules, use cases and monitoring
• Automate manual detection and remediation processes
• Develop threat intelligence and threat-hunting capabilities
• Improve security monitoring across AWS, GCP and Azure
• Work closely with engineering teams to turn security findings into scalable technical improvements
• Review existing tooling and influence future technology decisions
• Provide technical leadership and help upskill others across the security function

What we’re looking for:

• Experience building detections rather than purely responding to SOC alerts
• Strong SIEM experience – Microsoft Sentinel, Splunk or similar
• Cloud security experience across AWS, GCP and/or Azure
• KQL, SPL or similar querying experience
• Python scripting / security automation
• Terraform / Infrastructure as Code exposure
• Experience with threat intelligence or threat hunting
• Strong ownership and stakeholder communication skills

This would particularly suit someone from a fintech, payments or financial‑services environment who wants the opportunity to shape a growing security capability rather than inherit a finished one.

Up to £120k base + discretionary bonus

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →