Senior Cloud Threat Detection Engineer - AWS & Azure, Elastic Stack, Sentinel, KQL, EQL, SOC - Global B2B SaaS

Senior Cloud Threat Detection Engineer - AWS & Azure, Elastic Stack, Sentinel, KQL, EQL, SOC - Global B2B SaaS
● £100k per annum ● 6-month Fixed Term Contract ● 100% remote
Outstanding opportunity to join this global B2B SaaS organisation looking for a Senior Cloud Detection Engineer to take ownership of cloud‑native security threat detection and response capability. If you thrive in high‑scale cloud environments and love building smart detections and automated response workflows, this role gives you real technical impact.
What You’ll Do:
* Build and optimise Threat Detection capabilities in Elastic and Azure Sentinel
* Develop Threat Models for AWS & Azure across a suite of global SaaS products
* Create and maintain incident response playbooks
* Automate response playbooks
* Partner with our external SOC to refine detection strategies
* Perform threat hunting and analysis across large‑scale cloud environments
* Tune rules to reduce false positives
* Document detection logic and playbook procedures
What You Bring:
* Extensive Threat Detection & Threat Modelling experience
* Background in senior security operations or SOC roles
* Strong experience with Elastic Stack and Azure Sentinel
* Hands‑on detection rule writing in KQL & EQL
* Deep understanding of AWS & Azure security ideally in a global SaaS context
* Experience with automation tools (Tines, Shuffler,Tracecat)
* Familiarity with MITRE ATT&CK or similar frameworks
* Extensive playbook development and incident response experience
* Strong communication skills and ability to work independently
* SOAR experience
* PowerShell & Python scripting
* Extensive experience with AWS Cloud‑native security tools (CloudTrail, GuardDuty, Security Hub)
* Security certifications (GIAC, CEH, CISSP, etc.)
* Experience working with MSSPs or external SOCs
● £100k per annum ● 6-month Fixed Term Contract ● 100% remote