> Markdown version of [/jobs/ext/2112327-cyber-security-engineer-threat-detection-automation](https://www.wearedevelopers.com/jobs/ext/2112327-cyber-security-engineer-threat-detection-automation). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Engineer (Threat Detection & Automation) - **Company:** Additional Resources - **Location:** London, UK (Remote available) - **Salary:** £60,000.0 - £80,000.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Artificial Intelligence, Microsoft Azure, Software as a Service, Cloud Engineering, Cyber Security, Continuous Integration, Intrusion Detection and Prevention, Microsoft Office, Azure Active Directory, Kusto Query Language, Data Logging, Cyber Threat Analysis, Kubernetes, Microsoft Sentinel - **Published:** August 19, 2026 - **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=2933542539-2 ## About the Role MSP SOC teams, Awareness of Agile methodologies and ways of working.Knowledge of attacker TTPs, threat modelling, and cyber security frameworks.Understanding of statistics, data science, or AI/ML as applied to security.Awareness of ISO 27001 standards.Relevant cyber security certifications (e.g., MS-500, AZ-500, SC-200, SC-300, SC-400, Security+, GSOC, CCSK).This is a rare chance to contribute to meaningful cyber security work in a role where your expertise will directly influence how threats are detected and mitigated at scale.Relevant job titles: Threat Detection Engineer, Cyber Threat Engineer, Detection & Response Engineer, Security Detection EngineerImportant Information: We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone, or text message. For more information see our Privacy Policy on our ## Description Reference: HJ/AR/070202Job Type: PermanentSalary: 60,000 - 80,000 Location: Westminster, Central LondonSector: ITPosted: 2026-03-23An exciting opportunity has arisen for a Threat Detection Engineer to join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.As a Threat Detection Engineer, you will be responsible for developing and enhancing threat detection capabilities within a modern cloud-first setting.This role offers hybrid / remote working options, a salary range of 60,000 - 80,000 and benefits.You will be responsible for:Designing and implementing threat-led detection logic informed by threat intelligence and hunting activities.Developing innovative analytical techniques to identify incidents effectively.Collaborating with an outsourced SOC to maintain, tune, and optimise detection catalogues.Creating and refining DLP, Insider Risk Management, and other security rules using cloud-native tools.Monitoring and ensuring high-quality service delivery from external SOC providers.Automating reporting on security performance and operational metrics.Partnering with technology teams to ensure adequate monitoring across cloud platforms, SaaS, and internal systems.Documenting security processes, tool configurations, and contributing to service delivery documentation.Supporting colleagues with ISO 27001 compliance and KQL-related tasks.What we are looking for:Previously worked as a Threat Detection Engineer or in a similar role.Must have strong expertise in KQL.Hands-on experience with Microsoft Sentinel and Defender (Endpoint, Office 365).Familiarity with Microsoft Entra ID, including Identity Governance.Experience with Microsoft Purview, particularly DLP and data protection tools.Exposure to cloud-native logging in Azure and Kubernetes environments.Understanding of "detection as code" or "everything as code" approaches, including CI/CD pipelines., Experience working with or alongside ## Related Videos - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)