Threat Detection Engineer (KQL, SPL, Python/PowerShell, Microsoft Security) - Permanent
Job Description
\n
Threat Detection Engineer (KQL, SPL, Python/PowerShell, Microsoft Security) - Permanent
\n
Location: London
Job Type: Permanent
\n
A leading global financial services organisation is looking for a Threat Detection Engineer to help transform its Security Operations capability.
\n
You'll be responsible for threat hunting, detection engineering, security automation and incident response, developing high-quality detections to protect a large enterprise environment.
\n
Key Responsibilities
\n
- \n
- Proactive threat hunting across multiple data sources.
- Build and optimise detections using KQL, SPL and SQL.
- Develop automated detection and response playbooks.
- Lead technical security investigations and incident response.
- Improve monitoring capabilities and security operations.
- Work closely with infrastructure and technology teams to strengthen cyber resilience.
\n
\n
\n
\n
\n
\n\n
Required Skills
\n
- \n
- 3+ years in Threat Detection, Security Engineering or SOC.
- Strong threat hunting and detection engineering experience.
- Experience with KQL, SPL or SQL.
- Scripting with PowerShell and/or Python.
- Experience with OSINT and malicious email analysis.
- Knowledge of enterprise security technologies across endpoint, identity, network and cloud.
- Strong Microsoft infrastructure knowledge including Active Directory, Entra ID, Intune, Microsoft 365, Windows and Linux.
- Security certifications such as CISSP, OSCP, Security+, CEH, GCIA or GCIH are advantageous.
\n
\n
\n
\n
\n
\n
\n
\n\n
This is a fantastic opportunity to join a high-performing security team working with modern technologies in a fast-paced, enterprise environment.