Threat Detection Engineer – Hybrid / Remote

Overview

In this role you will design and implement threat-led detections to protect sensitive genomic and AI-driven data at scale. You will own detection development, collaborate with an MSP SOC, and drive automation and reporting to strengthen cloud and on-prem security. The position sits in a mission-driven biotech environment with autonomy and opportunities to shape security practices. You will work across teams to translate threat intelligence into effective, scalable defenses.

Pay / Benefits

• Hybrid / remote working options
• Flexible benefits package
• Opportunity to innovate and make an impact
• Small, fast-paced, highly collaborative team
• Contribute to precision healthcare using genomic data and AI

Responsibilities

• Design and develop threat-led detections using threat intelligence and hunting outputs
• Create novel analytic techniques for incident detection
• Collaborate with an MSP SOC to maintain and tune the detection catalogue
• Build automated reporting dashboards using Microsoft Sentinel workbooks
• Support security initiatives including ISO 27001 activities and KQL-based tasks
• Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems
• Contribute to documentation of processes, tools, and detection logic

Key requirements

• Previously worked as a Threat Detection Engineer or in a similar role
• Strong proficiency in KQL and hands-on experience with Microsoft Sentinel
• Familiarity with Microsoft Defender tools (Endpoint & O365)
• Exposure to Azure cloud logging and Kubernetes environments
• Knowledge of attacker TTPs and MITRE ATT&CK frameworks
• Proactive, collaborative, and innovative mindset

• proactive
• collaborative
• innovative mindset
• KQL
• Microsoft Sentinel
• Microsoft Defender tools

…