Cybersecurity Detection Engineer - Banking- Contract - 80k P/M

Responsibilities

• Design, develop, and enhance security detection use cases based on real-world attack scenarios and frameworks such as MITRE ATT&CK.
• Strengthen SIEM and SOAR detection capabilities to improve threat detection, investigation, and response across enterprise environments.
• Perform threat hunting, security event analysis, incident investigation, and coordinate incident response activities with regional and global security teams.
• Develop and optimize detection logic, automation, and security content to improve SOC effectiveness and reduce response time.
• Investigate emerging cyber threats and translate threat intelligence into new detection use cases and mitigation strategies.
• Oversee and continuously improve security monitoring capabilities supporting a 24/7 Security Operations Centre (SOC).
• Collaborate with Security, Infrastructure, and Business stakeholders to strengthen incident response processes and integrated security monitoring.
• Identify recurring security issues, recommend remediation plans, and drive continuous improvement of security operations, playbooks, and processes.
• Support regulatory, audit, and compliance requirements by providing incident reporting, documentation, and evidence.
• Participate in security research, proof of concepts, and continuous improvement initiatives for detection engineering and incident response.

Requirements

• Minimum 7 years of cybersecurity experience, including 4+ years in Detection Engineering, Security Use Case Development, or Security Investigation.
• Strong hands-on experience designing and developing security detection use cases for enterprise SIEM platforms.
• Experience with Security Incident Response, Threat Hunting, Security Monitoring, Event Analysis, and Incident Investigation.
• Good understanding of MITRE ATT&CK, threat modelling, attack techniques, and detection engineering best practices.
• Experience working with SIEM and SOAR platforms. Experience with the Elastic (ELK) Stack is an advantage.
• Strong knowledge of Linux environments (Red Hat, Ubuntu).
• Ability to interpret security logs and build detection logic from multiple data sources.
• Experience with Java development. Knowledge of Python, PowerShell, Bash, or SQL for automation and scripting is advantageous.
• Familiarity with SecOps/DevOps practices and automation-driven security operations.
• Experience working with large security datasets and building scalable detection content.
• Strong analytical, troubleshooting, and communication skills with experience collaborating across regional and global teams.
• Professional security certifications such as CISSP, GIAC/SANS, OSCP, or equivalent are highly desirable.

Argyll Scott Asia is acting as an Employment Business in relation to this vacancy.