Threat Detection Engineer

Additional Resources
Wc1A2Sl, WC1A 2SL, United Kingdom
3 weeks ago
£60,000 – £80,000 pa

Salary

£60,000 – £80,000 pa

Job Type
Permanent
Work Location
Hybrid
Seniority
Mid
Education
Degree
Posted
6 May 2026 (3 weeks ago)

Benefits

Hybrid / remote working options Flexible benefits package Opportunity to innovate and make a real impact in threat detection Work in a small, fast-paced, highly collaborative team Contribute to advancing precision healthcare using genomic data and AI

Join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare.

We’re looking for aThreat Detection Engineer who thrives on innovation and technical ownership. This role isnot a traditional SOC position, you’ll focus onbuilding high-impact detection capabilities, shaping how security protects sensitive genomic and AI-driven data at scale.

This role offershybrid / remoteworking options, a salary range of £60,000 - £80,000 and benefits.

Why This Role is Exciting

  • High autonomy: Lead projects from idea to deployment
  • Innovation-driven: Develop cutting-edge detections beyond standard SIEM rules
  • Collaborative: Work closely with internal teams and an outsourced SOC partner
  • Mission-focused: Protect critical healthcare data that supports precision medicine

Key Responsibilities

  • Design and developthreat-led detections using threat intelligence and threat-hunting outputs
  • Createnovel analytic techniques for incident detection
  • Collaborate with an MSP SOC to maintain and tune the detection catalogue
  • Build automated reporting dashboards using Microsoft Sentinel workbooks
  • Support security initiatives including ISO 27001 activities and KQL-based tasks
  • Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems
  • Contribute to documentation of processes, tools, and detection logic

What You’ll Bring

Must-Have Skills & Experience:

  • Previously worked as a Threat Detection Engineer or in a similar role.
  • Strong proficiency inKQL and hands-on experience withMicrosoft Sentinel
  • Familiarity withMicrosoft Defender tools (Endpoint & O365)
  • Exposure toAzure cloud logging andKubernetes environments
  • Knowledge ofattacker TTPs andMITRE ATT&CK frameworks
  • Proactive, collaborative, and innovative mindset

Desirable / Nice-to-Have:

  • Experience withPython,Terraform, or CI/CD pipelines
  • Familiarity withMicrosoft Purview, Entra ID, DLP, or Insider Risk tools
  • Understanding ofISO 27001, Agile ways of working
  • Knowledge ofstatistics, data science, or AI/ML applied to cybersecurity
  • Relevant certifications (MS-500, AZ-500, SC-series, Security+, GSOC, CCSK)

Perks & Benefits

  • Hybrid / remote working options
  • Flexible benefits package
  • Opportunity to innovate and make areal impact in threat detection
  • Work in asmall, fast-paced, highly collaborative team
  • Contribute toadvancing precision healthcare using genomic data and AI

Ready to build next-generation threat detection and protect life-changing data Apply today!

Important Information: We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone, or text message. For more information see our Privacy Policy on our website. It is important you are aware of your individual rights and the provisions the company has put in place to protect your data. If you would like further information on the policy or GDPR please contact us.

Additional Resources Ltd is an Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003.

Keywords:Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security Engineer, Cybersecurity Analyst (Threat Focus), Threat Intelligence Analyst, Security Monitoring Engineer, Endpoint Security Engineer, Cyber Defense Engineer

Related Jobs

View all jobs

Threat Detection Engineer

Additional Resources London, United Kingdom
£60,000 – £80,000 pa Hybrid

Cyber Threat Detection / SIEM Analyst - SANS/GIAC

Adecco Wokingham, Berkshire, United Kingdom
£60,000 – £90,000 pa On-site Clearance Required

Cyber Threat Detection / SOC Analyst - SANS/GIAC

Adecco Wokingham, Berkshire, United Kingdom
On-site Clearance Required

Cyber Threat Detection / SOC Analyst - SANS/GIAC

Adecco Wokingham, United Kingdom

SIEM Analyst (Cyber Threat Detection) - SANS/GIAC x2

Adecco Wokingham, Berkshire, United Kingdom
£65,000 – £90,000 pa On-site Clearance Required

AI-Augmented Cyber Security Engineer

Eligo Recruitment Tower Of London, London, United Kingdom
£75,000 – £90,000 pa Hybrid

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Where to Advertise Cyber Security Jobs in the UK (2026 Guide)

Where to advertise cyber security jobs UK in 2026: the specialist boards, communities and channels that reach offensive, defensive and GRC security talent. The candidate pool is small, heavily vetted and in high demand across government, financial services, critical national infrastructure and the private sector simultaneously. Many of the strongest candidates hold active security clearances, are not actively job-searching through general platforms, and move primarily through specialist networks and trusted referrals. General job boards reach a broad audience but lack the specificity that security professionals expect. Specialist platforms, government-affiliated channels and cleared candidate networks each serve a different part of the market. This guide, published by CybersecurityJobs.tech, covers where to advertise cyber security roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Cyber Security Jobs UK 2026: What to Expect Over the Next 3 Years

Cyber Security Jobs UK 2026: roles, salaries and the threat intelligence, cloud security and zero-trust hiring trends shaping UK cyber careers. Cyber security is one of the few sectors where demand for talent has never once dipped. Every major technological shift of the past decade — cloud migration, remote working, AI adoption, the proliferation of connected devices — has expanded the attack surface that security professionals are expected to defend. And every expansion of that attack surface has generated more jobs. But the cyber security jobs market of 2026 is not simply a larger version of what it was three years ago. It is a structurally different market. The threats have evolved, the technologies used to combat them have changed, the regulatory environment has tightened considerably, and the roles being created reflect all of that. A job seeker who understands only the cyber security landscape of 2023 is already working with an outdated map. The candidates who will thrive over the next three years are those who understand where the sector is heading — which specialisms are attracting the most investment, which technologies are reshaping defensive and offensive security practice, and how the definition of a cyber security professional is broadening well beyond the traditional image of a network defender in a SOC. This article breaks down what the UK cyber security jobs market is likely to look like through to 2028 — covering the titles emerging right now, the technologies driving employer demand, the skills that will matter most, and how to position your career ahead of the curve.