
Senior Cloud Detection Engineer - Elastic Stack, Sentinel, AWS
Quick overview
Job description
Senior Cloud Detection Engineer - AWS & Azure, Elastic Stack, Sentinel, KQL, EQL, SOC -Global B2B SaaS
? £120k per annum ? 6-month Fixed Term Contract ? 100% remote
Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical impact.
What You'll Do:
- Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel
- Develop Threat Models for AWS & Azure and our global SaaS products
- Create and maintain incident response playbooks
- Automate response actions with the Security Team
- Partner with our external SOC to refine detection strategies
- Perform threat hunting and analysis across large-scale cloud environments
- Tune rules to reduce false positives
- Document detection logic and playbook procedures
What You Bring:
- Extensive Threat Detection & Threat Modelling experience
- Background in security operations or SOC roles
- Strong experience with Elastic Stack and/or Azure Sentinel
- Hands-on detection rule writing in KQL & EQL
- Deep understanding of AWS & Azure security ideally in a global SaaS context
- Experience with automation tools (Tines, Shuffler, Tracecat)
- Familiarity with MITRE ATT&CK or similar frameworks
- Playbook and incident response experience
- Strong communication skills and ability to work independently
- SOAR experience
- PowerShell & Python scripting
- Cloud-native security tools (CloudTrail, GuardDuty, Security Hub)
- Security certifications (GIAC, CEH, CISSP, etc.)
- Experience working with MSSPs or external SOCs
? £120k per annum ? 6-month Fixed Term Contract ? 100% remote
Similar jobs
- IA

Senior Modern Workplace EngineerRecently posted
IO Associates · Bubbenhall, Warwickshire · On-site 🇬🇧
Stakeholder ManagementMicrosoft OfficeCloudflare+2TechnologySalary not listed - HT
Network Infrastructure Engineer
Halian Technology Limited · London · Hybrid 🇬🇧
AWSTCP/IPTerraform+2Technology£75k/yr - TT
Senior Azure ArchitectRecently posted Auto Apply
Telefonica Tech · London · Remote 🇬🇧
AWSDiversity & InclusionAzureTechnologySalary not listed - AM

AWS Cloud EngineerRecently posted
Anson McCade · london · Hybrid 🇬🇧
DockerMicroservicesShell+16TechnologySalary not listed - SC

Senior Infrastructure Engineer - LinuxRecently posted
Solos Consultants Ltd · Hanslope, Buckinghamshire · On-site 🇬🇧
LinuxTechnologySalary not listed - KC

Cloud Operations EngineerRecently posted
Kerridge Commercial Systems · barnsley, south yorkshire · Remote 🇬🇧
OracleSOC 2Bash+7TechnologySalary not listed - GS

Tech Finance Manager, Cloud & Engineering PlatformsRecently posted
GSK · london · Hybrid 🇬🇧
Stakeholder ManagementBudgetingForecasting+3FinanceSalary not listed - RW
(Senior) AWS Cloud Security Engineer d/f/mRecently posted
RWE · cheltenham, gloucestershire · Hybrid 🇬🇧
AWSTerraformAgile+1TechnologySalary not listed - GS

Senior Product Owner - Cloud & Engineering PlatformsRecently posted
GSK · london · Hybrid 🇬🇧
SAFeStakeholder ManagementScrum+3Operations & Project ManagementSalary not listed - CH

Senior Cloud Engineer IRecently posted Auto Apply
Checkout.com · London · On-site 🇬🇧
GitAWSPCI DSS+7TechnologySalary not listed - DE

Cloud Engineer, Forensic & Financial Crime Technology Advisory and Data AnalyticsRecently posted
Deloitte · london · Hybrid 🇬🇧
DockerDynamoDBGCP+37TechnologySalary not listed - FE
Network EngineerRecently posted
Fuse Energy Supply · london · On-site 🇬🇧
LinuxIAMNetwork AdministrationTechnologySalary not listed