Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud‑native detection and response capability. If you thrive in high‑scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical impact.
What You’ll Do:
Build and optimise detections in Elastic and Azure Sentinel
Develop threat models for AWS & Azure and our global SaaS products
Create and maintain incident response playbooks
Automate response actions with the Security Team
Partner with our external SOC to refine detection strategies
Perform threat hunting and analysis across large‑scale cloud environments
Tune rules to reduce false positives
Document detection logic and playbook procedures
What You Bring:
5+ years in security operations, threat detection, or SOC roles
Strong experience with Elastic Stack and/or Azure Sentinel
Hands‑on detection rule writing in KQL & EQL
Deep understanding of AWS & Azure security ideally in a global SaaS context
Experience with automation tools (Tines, Shuffler, Tracecat)
Familiarity with MITRE ATT&CK or similar frameworks
Playbook and incident response experience
Strong communication skills and ability to work independently
We use essential cookies to make this site work. With your permission we would also like to use the optional cookies below. Nothing optional is set until you choose, and you can change your mind at any time from "Cookie settings" at the bottom of every page. Cookie policy.
Essential — keep the site working and secure, and remember the choice you make here. Always on.