Senior Detection Engineer - Banking

About the role

We are looking for an experienced Senior Detection Engineer to lead the design, development and maturity of enterprise threat detection capabilities for a banking environment. The role will shape a threat‑informed detection program, align it with regulatory obligations and drive proactive identification of emerging threats.

Key responsibilities

• Establish and evolve a mature detection engineering function, define standards, governance and quality frameworks, and mentor engineers and analysts.
• Translate threat intelligence into prioritized detection requirements and collaborate with Threat Intelligence, Threat Hunting, Red Team and Incident Response teams.
• Design, develop and optimise detections in Microsoft Sentinel and IBM QRadar using KQL, AQL, behavior‑based, anomaly‑based and correlation techniques.
• Implement Detection‑as‑Code with version control, CI/CD pipelines and integrate with SOAR workflows.
• Map detection coverage to MITRE ATT&CK, D3FEND, Cyber Kill Chain, Diamond Model and Pyramid of Pain, identify gaps and validate through purple‑team exercises.
• Define and report performance metrics such as coverage, alert fidelity, false‑positive rates and mean time to detect, and maintain audit‑ready documentation.

Required profile

• 8+ years of cybersecurity experience, including 4+ years in detection engineering or threat detection.
• Proven experience building or leading enterprise detection engineering functions.
• Strong communication, leadership and problem‑solving abilities.

Required skills

• Microsoft Sentinel, IBM QRadar, KQL, AQL, Detection‑as‑Code, Git, CI/CD pipelines.
• MITRE ATT&CK, MITRE D3FEND, NIST Cybersecurity Framework, Cyber Kill Chain, Pyramid of Pain, Diamond Model.
• Windows, Linux, Azure, Microsoft 365, Identity Services, Network Security Platforms.
• Python, PowerShell.
• Sigma, YARA, MISP, OpenCTI, Recorded Future, Microsoft Defender XDR, advanced EDR platforms.