Lead Cloud Detection & Threat Modelling Engineer in London

Lead Cloud Detection & Threat Modelling Engineer – AWS, Azure, Sentinel, Elastic Stack, SOAR platforms ? 6 Month Fixed-Term Contract ? £110k-£120k pro rata ? 100% remote Build Detection Engineering, Threat Modelling & Security Automation Across Azure and AWS We're looking for a hands-on Senior Cloud Detection Engineer to help mature and scale our cloud security monitoring, detection and response capabilities across a complex, global, multi-cloud environment. This role is ideal for someone who has progressed from a Senior SOC Analyst background into Threat Modelling & Detection Engineering and is passionate about threat detection, attack path analysis, automation, and incident response engineering. Working closely with the CISO, Security Engineering team and SOC partners, you'll own the end-to-end lifecycle of threat detection, from threat modelling and attack simulation through to detection development, automated response orchestration, tuning and continuous improvement. What You'll Be Doing: Design, build and optimise detections across both Microsoft Sentinel and Elastic Stack Develop and maintain advanced detection content using KQL and EQL Lead end-to-end threat modelling exercises across Azure, AWS , applications, identities, APIs and cloud-native services Identify attack paths, control gaps and detection opportunities using frameworks such as MITRE ATT&CK Engineer and automate investigation and response workflows using tools such as Tracecat, Tines, Shuffle or similar SOAR platforms Build automated playbooks covering triage, containment, enrichment, escalation and response activities Conduct proactive threat hunting across cloud, endpoint, identity and application telemetry