Senior Cloud Threat Detection Engineer - AWS & Azure, Elastic Stack, Sentinel, KQL, EQL, SOC

Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud-native security threat detection and response capability. If you thrive in high-scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical impact.

What You'll Do:

• Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel
• Develop Threat Models for AWS & Azure across a suite of global SaaS products
• Create and maintain incident response playbooks
• Automate response playbooks
• Partner with our external SOC to refine detection strategies
• Perform threat hunting and analysis across large-scale cloud environments
• Tune rules to reduce false positives
• Document detection logic and playbook procedures

What You Bring:

• Extensive Threat Detection & Threat Modelling experience
• Background in senior security operations or SOC roles
• Strong experience with Elastic Stack and Azure Sentinel
• Hands-on detection rule writing in KQL & EQL
• Deep understanding of AWS & Azure security ideally in a global SaaS context
• Experience with automation tools (Tines, Shuffler,Tracecat)
• Familiarity with MITRE ATT&CK or similar frameworks
• Extensive playbook development and incident response experience
• Strong communication skills and ability to work independently
• SOAR experience
• PowerShell & Python Scripting
• Extensive experience with AWS Cloud-native security tools (CloudTrail, GuardDuty, Security Hub)
• Security certifications (GIAC, CEH, CISSP, etc.)
• Experience working with MSSPs or external SOCs