TipTopJob
Threat Detection Engineer : Hybrid / Remote
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.
We're looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position; you'll focus on building high-impact detection capabilities, shaping how security protects sensitive genomic and AI-driven data at scale.
This role offers hybrid/remote working options, a salary range of GBP 60,000 - GBP 80,000 and benefits.
Why This Role is Exciting
- High autonomy: Lead projects from idea to deployment
- Innovation-driven: Develop cutting-edge detections beyond standard SIEM rules
- Collaborative: Work closely with internal teams and an outsourced SOC partner
- Mission-focused: Protect critical healthcare data that supports precision medicine
Key Responsibilities
- Design and develop threat-led detections using threat intelligence and threat-hunting outputs
- Create novel analytic techniques for incident detection
- Collaborate with an MSP SOC to maintain and tune the detection catalogue
- Build automated reporting dashboards using Microsoft Sentinel workbooks
- Support security initiatives including ISO 27001 activities and KQL-based tasks
- Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems
- Contribute to documentation of processes, tools, and detection logic
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What You'll Bring
Must-Have Skills and Experience:
- Previously worked as a Threat Detection Engineer or in a similar role.
- Strong proficiency in KQL and hands-on experience with Microsoft Sentinel
- Familiarity with Microsoft Defender tools (Endpoint and O365)
- Exposure to Azure cloud logging and Kubernetes environments
- Knowledge of attacker TTPs and MITRE ATT and CK frameworks
- Proactive, collaborative, and innovative mindset
Desirable/Nice-to-Have:
- Experience with Python, Terraform, or CI/CD pipelines
- Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools
- Understanding of ISO 27001, Agile ways of working
- Knowledge of statistics, data science, or AI/ML applied to cybersecurity
- Relevant certifications (MS-500, AZ-500, SC-series, Security+, GSOC, CCSK)
Perks and Benefits
- Hybrid/remote working options
- Flexible benefits package
- Opportunity to innovate and make a real impact in threat detection
- Work in a small, fast-paced, highly collaborative team
- Contribute to advancing precision healthcare using genomic data and AI
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Ready to build next-generation threat detection and protect life-changing data? Apply today
Important Information:
We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone, or text message. For more information see our Privacy Policy on our website. It is important you are aware of your individual rights and the provisions the company has put in place to protect your data. If you would like further information on the policy or GDPR, please contact us.
Additional Resources Ltd is an Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies and Employment Businesses Regulations 2003.
Keywords: Cyber Threat Engineer, Detection and Response Engineer, SIEM Engineer, Security Detection Engineer, Threat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security Engineer, Cybersecurity Analyst (Threat Focus), Threat Intelligence Analyst, Security Monitoring Engineer, Endpoint Security Engineer, Cyber Defense Engineer
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location