Overview
Threat Detection Engineer - Remote - SC Clearance - Contract
As a key member of the SOC Content Team, you will be responsible for developing, deploying, and fine-tuning threat detection content, as well as delivering proactive threat hunting activities. This role involves close collaboration with client Lead Analysts, threat intelligence teams, and wider SOC functions to ensure detection strategies are aligned with each client's threat landscape and security objectives. You'll enjoy a mix of hands-on technical work, teamwork, and knowledge sharing, with a strong focus on continuous learning and process improvement.
Responsibilities
Threat Detection & Use Case Development
* Design and build detection logic aligned to real-world threat scenarios, using frameworks such as MITRE ATTACK.
* Manage detection content throughout its full life cycle – development, testing, deployment, and tuning.
* Partner with client Lead Analysts to ensure content remains effective and relevant across multiple environments.
Proactive Threat Hunting
* Conduct hypothesis-driven threat hunts using client telemetry, threat intelligence, and anomalies.
* Identify suspicious or malicious activity that may bypass existing detection controls.
* Document and present findings clearly for both internal teams and clients.
Content Quality Assurance & Maintenance
* Review and validate detection content before deployment.
* Assist in updating runbooks, SOPs, and detection playbooks as tools, threats, or requirements evolve.
* Support efforts to maintain accuracy, consistency, and quality across all delivered content.
Collaboration & Knowledge Sharing
* Work closely with SOC, threat intelligence, and tooling teams to improve detection strategies.
* Share insights and best practices through documentation, workshops, or informal knowledge sessions.
* Contribute to cross-team initiatives and help foster continuous improvement and innovation.
Role Details
* Location: Remote
* Duration: 4 Months
* Holiday Entitlement: 33 Days
* Pay Rate: £474 PAYE/£629 Umbrella
* SC Clearance required!
If you are interested, please apply directly.
Randstad Technologies is acting as an Employment Business in relation to this vacancy.
#J-18808-Ljbffr