Threat Detection Engineer (KQL, SPL, Python/PowerShell, Microsoft Security) - Permanent

Threat Detection Engineer (KQL, SPL, Python/PowerShell, Microsoft Security) - Permanent

Location: London
Job Type: Permanent

A leading global financial services organisation is looking for a Threat Detection Engineer to help transform its Security Operations capability.

You'll be responsible for threat hunting, detection engineering, security automation and incident response, developing high-quality detections to protect a large enterprise environment.

Key Responsibilities

• Proactive threat hunting across multiple data sources.
• Build and optimise detections using KQL, SPL and SQL.
• Develop automated detection and response playbooks.
• Lead technical security investigations and incident response.
• Improve monitoring capabilities and security operations.
• Work closely with infrastructure and technology teams to strengthen cyber resilience.

Required Skills

• 3+ years in Threat Detection, Security Engineering or SOC.
• Strong threat hunting and detection engineering experience.
• Experience with KQL, SPL or SQL.
• Scripting with PowerShell and/or Python.
• Experience with OSINT and malicious email analysis.
• Knowledge of enterprise security technologies across endpoint, identity, network and cloud.
• Strong Microsoft infrastructure knowledge including Active Directory, Entra ID, Intune, Microsoft 365, Windows and Linux.
• Security certifications such as CISSP, OSCP, Security+, CEH, GCIA or GCIH are advantageous.

This is a fantastic opportunity to join a high-performing security team working with modern technologies in a fast-paced, enterprise environment.