Cyber Defense Engineer

In this role you will engineer and optimise security tooling across cloud and on‑prem environments, turning threat hunting findings into practical improvements. You will develop detection capabilities across SIEM, endpoint and cloud platforms, and work closely with offensive and defensive security teams to enhance monitoring and visibility. You will translate emerging threats into improved detection rules and security controls, while maintaining telemetry pipelines. This position offers meaningful impact by strengthening cyber defence capabilities and shaping security outcomes at scale.

• Develop and improve threat detection capabilities across SIEM, endpoint and cloud security platforms
• Configure and optimise security tooling to improve monitoring, visibility and threat detection
• Develop custom queries, analytics and alerting to identify potential security threats
• Maintain and validate logging and telemetry pipelines across cloud and on‑premises environments
• Support vulnerability management, application security testing and attack surface management
• Implement recommendations from red team exercises, threat hunting and threat intelligence activities
• Translate emerging threats into improved detection rules and security controls
• Support security tool integrations and automation initiatives
• Collaborate with Cyber Defence, Infrastructure and Architecture teams to strengthen security capabilities

• Experience in Cyber Defence Engineering, Security Engineering, Detection Engineering or a similar role
• Hands-on experience with SIEM platforms, ideally Microsoft Sentinel and Microsoft Defender
• Proficiency in Kusto Query Language (KQL), including custom queries and detection logic
• Experience working with Azure and associated cloud security services
• Strong understanding of security monitoring, logging and threat detection
• Experience with vulnerability scanning, vulnerability management or application security testing tools
• Scripting or automation experience using Python, PowerShell or similar
• Understanding of threat intelligence, threat hunting and the MITRE ATT&CK framework
• Strong analytical and problem-solving skills, with the ability to work collaboratively across technical teams

• Collaborative
• Analytical
• Problem-solving
• SIEM
• Microsoft Sentinel
• Microsoft Defender