Senior Cloud Threat Detection Engineer - AWS, KQL, EQL, SOC in City of London

Senior Cloud Threat Detection Engineer - AWS & Azure, Elastic Stack, Sentinel, KQL, EQL, SOC - Global B2B SaaS
? £100k per annum
? 6-month Fixed Term Contract
? 100% remote
Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical impact.
What You'll Do:
Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel
Develop Threat Models for AWS & Azure across a suite of global SaaS products
Create and maintain incident response playbooks
Automate response playbooks
Partner with our external SOC to refine detection strategies
Perform threat hunting and analysis across large-scale cloud environments
Tune rules to reduce false positives
Document detection logic and playbook procedures
What You Bring:
Extensive Threat Detection & Threat Modelling experience
Background in senior security operations or SOC roles
Strong experience with Elastic Stack and Azure Sentinel
Hands-on detection rule writing in KQL & EQL
Deep understanding of AWS & Azure security ideally in a global SaaS context
Experience with automation tools (Tines, Shuffler,Tracecat)
Familiarity with MITRE ATT&CK or similar frameworks
Extensive playbook development and incident response experience
Strong communication skills and ability to work independently
SOAR experience
PowerShell & Python scripting
Extensive experience with AWS Cloud-native security tools (CloudTrail, GuardDuty, Security Hub)
Security certifications (GIAC, CEH, CISSP, etc.)
Experience working with MSSPs or external SOCs
? £100k per annum
? 6-month Fixed Term Contract
? 100% remote
TPBN1_UKTJ