Senior Detection & Threat Engineer

The role

You will own and evolve the company's threat detection and threat-hunting capability. You will engineer high-fidelity detections across endpoint, identity, cloud, and SaaS.

What you will do

• Engineering high-fidelity threat detections across endpoint, identity, cloud, and SaaS
• Defining detection standards, principles, and quality thresholds for Security Operations
• Conducting proactive threat hunting based on attacker behaviour
• Translating threat intelligence and incident learnings into durable, reusable detections
• Mapping detections to MITRE ATT&CK and real-world attack paths
• Reducing alert fatigue through logic refinement, correlation, and contextual enrichment
• Advising and supporting during high-severity security incidents
• Contributing to runbooks and escalation playbooks
• Driving the transition of advanced detection capability into Cyber Security ownership

Required qualifications

• Proven experience in detection engineering, threat hunting, or advanced SOC roles
• Deep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycle
• Hands-on experience building detection logic in modern SIEM platforms (e.g. Sentinel)
• Proficiency with scripting and programming (e.g. Python, KQL) to build detection pipelines and automation
• Willingness to challenge bad detections, weak assumptions, and vanity metrics
• Pragmatic mindset
• Experience operating beyond traditional SOC or MSSP models
• Hands-on cloud detection experience (identity, control plane, SaaS)
• Familiarity with threat intelligence platforms and frameworks such as PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud

About the company

Checkout.com enables over 10 billion transactions yearly for more than one billion global shoppers. The company has 20 offices across six continents with London as HQ.