Orbis Group
Lead Threat Detection Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Lead Threat Detection Engineer | London | Up to £120k + Bonus
I'm working with a leading global fintech on a senior hire into a newly established security function.
This is a hands-on role for someone who wants to go beyond responding to alerts and take real ownership of how threat detection and intelligence is built, automated and improved across a large-scale, multi-cloud environment. You'll be joining at a point where the core security tooling is already in place, but there's significant scope to define what best-in-class looks like.
What you'll be doing:
- Own and improve the threat detection lifecycle across a complex cloud estate
- Build and enhance SIEM detection rules, use cases and monitoring
- Automate manual detection and remediation processes
- Develop threat intelligence and threat-hunting capabilities
- Improve security monitoring across AWS, GCP and Azure
- Work closely with engineering teams to turn security findings into scalable technical improvements
- Review existing tooling and influence future technology decisions
- Provide technical leadership and help upskill others across the security function
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we're looking for:
- Strong hands-on detection engineering experience
- Experience building detections rather than purely responding to SOC alerts
- Strong SIEM experience – Microsoft Sentinel, Splunk or similar
- Cloud security experience across AWS, GCP and/or Azure
- KQL, SPL or similar querying experience
- Python scripting / security automation
- Terraform / Infrastructure as Code exposure
- Experience with threat intelligence or threat hunting
- Strong ownership and stakeholder communication skills
Get help with your application
Your very own career expert that helps elevate your application to the next level.
This would particularly suit someone from a fintech, payments or financial-services environment who wants the opportunity to shape a growing security capability rather than inherit a finished one.
📍 London – 3 days per week onsite
💰 Up to £120k base + discretionary bonus
If you're interested, drop me a message and I can talk you through the team, technology and scope in more detail.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location