Cyber Security Engineer (Detection & Threat Hunting)

Reference: 001_1793895344

Cyber Security Engineer (Detection Engineering & Threat Hunting)

Fully Remote | Inside IR35 | £750 per day

A leading global investment organisation is seeking an experienced Cyber Security Engineer to join its Security Operations function on a high-profile contract engagement.

This is an opportunity to work within a mature, cloud-first environment, helping to enhance threat detection, monitoring, automation, incident response, and AI-driven security capabilities. You'll play a key role in advancing security engineering practices across a modern enterprise technology estate while helping defend against increasingly sophisticated threats, including those targeting AI platforms and services.

The Opportunity

You'll join a highly skilled Security Operations team focused on proactive defence, continuous improvement, and engineering-led security operations. This is a hands-on role suited to someone who enjoys building solutions, improving detection capabilities, automating processes, and hunting for emerging threats across a complex enterprise environment.

You'll be trusted to identify security gaps, improve tooling effectiveness, and help raise the organisation's overall security maturity while working closely with stakeholders across technology and the wider business.

Key Responsibilities

Detection Engineering & Monitoring

  • Design, build and optimise security detections across SIEM and XDR platforms.
  • Develop and tune detection logic using technologies such as KQL, SPL or similar query languages.
  • Improve visibility across endpoint, cloud, identity and SaaS environments.
  • Enhance alert quality, reduce false positives, and improve operational effectiveness.
  • Map detections and monitoring capabilities to MITRE ATT&CK techniques.
  • Build monitoring and detection capabilities for emerging AI-related threats and adversarial AI activity.

Threat Hunting

  • Conduct proactive, intelligence-led threat hunts across endpoint, identity, cloud and SaaS telemetry.
  • Investigate suspicious activity and identify previously undetected threats.
  • Translate hunt findings into new detections, controls and automated response capabilities.

Security Automation

  • Develop automation and orchestration workflows that reduce manual effort and accelerate response.
  • Use Python and/or PowerShell to automate security operations activities.
  • Leverage AI-powered security capabilities to improve investigation and response efficiency.

Incident Response

  • Investigate and respond to security incidents involving endpoints, cloud services, identities and collaboration technologies.
  • Support containment, eradication and recovery activities.
  • Conduct post-incident reviews and implement lessons learned.
  • Act as a technical escalation point for complex investigations and security events.

Security Tool Optimisation

  • Review and improve the effectiveness of existing security technologies.
  • Identify coverage gaps, telemetry issues and integration opportunities.
  • Recommend enhancements that increase value from current security investments.
  • Drive continuous improvements across the security operations toolset.

Skills & Experience Required

We're keen to speak with Cyber Security Engineers who have:

  • Extensive experience within Security Engineering, Security Operations, Detection Engineering, Threat Hunting or Incident Response environments.
  • Strong hands-on experience with modern SIEM and/or XDR technologies.
  • Expertise building and tuning detections using KQL, SPL, CrowdStrike Query Language, or similar.
  • Experience securing and investigating threats within Microsoft 365 environments.
  • Knowledge of Endpoint Detection & Response technologies across Windows and macOS.
  • Strong scripting and automation capabilities using Python and/or PowerShell.
  • Practical experience using AI-enabled security tooling and AI-assisted SOC capabilities.
  • Strong understanding of attacker methodologies and frameworks such as MITRE ATT&CK and NIST CSF.
  • Experience detecting threats involving AI misuse, prompt injection, AI-enabled phishing, or data leakage through AI platforms.
  • Excellent communication skills and the ability to engage effectively with both technical and non-technical stakeholders.

Technical Environment

You'll work across a modern security stack that includes:

  • SIEM & XDR platforms
  • Endpoint Detection & Response (EDR)
  • Microsoft 365 Security
  • Identity Threat Detection
  • Data Loss Prevention (DLP)
  • Cloud Security & Cloud Posture Management
  • Zero Trust architectures
  • AI-enabled Security Operations capabilities

What's On Offer?

  • Fully remote contract engagement
  • £750 per day, Inside IR35
  • Long-term programme of work
  • Opportunity to work with cutting-edge AI and cyber security technologies
  • Highly technical, engineering-focused role
  • Immediate interview process
  • Chance to make a significant impact within a globally recognised organisation

If you're a Cyber Security Engineer who enjoys building, automating, detecting and hunting within a modern security environment, we'd love to hear from you.

GCS is acting as an Employment Business in relation to this vacancy.

£700.00 - £750.00
Per day
GBP700 - GBP750 per day
Added 05/11/2026
Reference: 001_1793895344

Cyber Security Engineer (Detection & Threat Hunting)

United Kingdom Contract Security consultant Remote

Other similar jobs

Threat Intelligence and Vulnerability Manager

Added 02/09/2026

Threat Intelligence and Vulnerability Manager6-Month Contract | Inside IR35 | London 1-2 Days Per WeekWe're looking for an experienced security leader to take ownership of Threat Intelligence, Vulnerability Management, Threat Modelling, Security Testing and External Threat Hunting capabilities within a complex, high-profile environment.This is a hands-on leadership role where you'll help identify emerging threats, uncover vulnerabilities, drive assurance activities, and provide the intelligence needed to strengthen enterprise security across IT, OT, physical and people security domains.Key Experience✅ Threat Intelligence & Threat Hunting ✅ Vulnerability Management & Risk Prioritisation ✅ Threat Modelling & Security Assurance ✅ Penetration Testing & Control Validation...

Learn more

Cyber Security Automation Engineer

Added 15/09/2026

Role- Senior Security Automation EngineerType- ContractDuration- 12+ monthsLocation- Mt. Laurel, NJOverviewSeeking a Senior Security Automation Engineer to build AI-driven security automation solutions within a Cyber Security Operations Center (CSOC). This is a hands-on engineering role focused on developing intelligent agents and automated workflows that improve threat detection, investigations, and incident response.Key ResponsibilitiesDesign, develop, deploy, and maintain production-grade security automation and AI-powered workflows.Build AI agents capable of accessing security data, using tools, maintaining context, and executing multi-step tasks.Automate processes across:Threat IntelligenceThreat HuntingDetection EngineeringSecurity InvestigationsIncident ResponseSecurity Data AnalysisApply advanced AI techniques including:Tool CallingRetrieval-Augmented Generation (RAG)Structured GenerationPlanning & ReflectionVerificationModel RoutingMulti-Agent CoordinationDesign memory, context...

Learn more

Cyber Security Engineer

Added 02/09/2026

Cyber Security Engineer Secure by Design & Security Platforms6-Month Contract | Inside IR35 | London 1-2 Days Per WeekWe're seeking a hands-on Cyber Security Engineer to embed Secure by Design principles across technology programmes while helping improve and optimise a suite of enterprise security platforms.This is an excellent opportunity for a security professional who enjoys working across architecture, engineering and delivery teams, influencing projects from inception through to deployment while providing practical, pragmatic security guidance.Key Experience✅ Secure by Design & Security Assurance ✅ Security Architecture & Design Reviews ✅ Threat Modelling & Risk Identification ✅ Microsoft Security Stack (Identity, Endpoint,...

Learn more

Cyber Security Engineer (OUTSIDE IR35)

Added 14/07/2026

Cyber Security Engineer - Microsoft 365 & Azure6-Month Contract | Outside IR35 | £350-400 per day | Remote (UK) | 1-2 Days per Month On-Site (South West London)A leading public sector organisation is looking for a Cyber Security Engineer to support a major cyber security improvement programme.Working alongside the Cyber Security, Infrastructure and Platform teams, you'll help deliver a range of security enhancements across Microsoft 365, Azure and AWS, strengthening the organisation's overall security posture while improving identity, endpoint, cloud and data protection capabilities.This is a fantastic opportunity for someone who enjoys hands-on engineering and wants to be involved in...

Learn more

Cyber Security Assurance Manager

Added 19/10/2026

Cyber Security Assurance Manager Contract: 6 Months Location: London (1 day per week onsite / flexible) Day Rate: Competitive Start: ASAPWe're supporting a large, international enterprise in the search for an experienced Cyber Security Assurance Manager to lead a cyber assurance and control effectiveness programme across a complex global environment.This is a senior second-line cyber security position, responsible for independently assessing the effectiveness of security controls, driving assurance activity, overseeing technical reviews, and providing risk-based insight to senior stakeholders. The successful contractor will lead a small team while acting as a trusted adviser across cyber security, technology, audit and risk...

Learn more

OT Cyber Security Consultant - Outside IR35

Added 05/10/2026

SC Cleared OT Cyber Security ConsultantOutside IR35 | 6-12 Month Contract | UK Based Contract DetailsInitial 6-12 month contract.Outside IR35.Active SC Clearance required.Single-stage interview process.The OpportunityWe are supporting a major Operational Technology (OT) Cyber Security programme within a critical infrastructure environment and are seeking an experienced OT Cyber Security Consultant to conduct assessments and inspections across operational sites throughout the UK.The successful consultant will be responsible for reviewing OT environments, assessing security maturity against recognised industry standards, identifying risks and providing practical recommendations to improve resilience across industrial control systems.This role would suit someone with a strong OT cyber background...

Learn more

SC Cleared OT Cyber Security Consultant (Outside IR35)

Added 02/10/2026

SC Cleared OT Cyber Security ConsultantOutside IR35 | 6-12 Month Contract | UK Based Contract DetailsInitial 6-12 month contract.Outside IR35.Active SC Clearance required.Single-stage interview process.The OpportunityWe are supporting a major Operational Technology (OT) Cyber Security programme within a critical infrastructure environment and are seeking an experienced OT Cyber Security Consultant to conduct assessments and inspections across operational sites throughout the UK.The successful consultant will be responsible for reviewing OT environments, assessing security maturity against recognised industry standards, identifying risks and providing practical recommendations to improve resilience across industrial control systems.This role would suit someone with a strong OT cyber background...

Learn more

Head of Cyber Security

Added 16/09/2026

Head of Cybersecurity The OpportunityWe are seeking an experienced Head of Cybersecurity to join a senior leadership team within a large, complex organisation operating in a highly regulated and rapidly evolving digital environment. The successful candidate will work closely with senior stakeholders across a broad range of organisations and industries, helping shape strategic approaches to emerging cybersecurity, technology and resilience requirements.The RoleThe Head of Cybersecurity will lead and develop a multidisciplinary team of experienced engagement and policy professionals. The role will involve significant engagement with senior stakeholders across industry, technology, public and private sector organisations, professional networks and other key...

Learn more

Cyber Security Architect - OutsideIR35

Added 31/07/2026

Security Architect - Consultant Advisory12-Month Contract | Outside IR35 | Hybrid (2 days per week on-site)Location: West London / Greater LondonWe are supporting a major UK transport infrastructure organisation undergoing a significant programme of cyber security improvement and technology transformation.We are seeking an experienced Security Architect Consultant to provide advisory support across a complex digital estate, reviewing security architectures, assessing risks, and supporting the delivery of security improvements across critical technology platforms.This role will involve working with technical teams, architects, and senior stakeholders to review existing security controls, improve security design practices, and support the implementation of secure technology solutions...

Learn more

Cyber Incident Response Lead

Added 01/11/2026

Cyber Incident Response Lead Contract | Outside IR35 | 6-Month Initial Contract | Immediate Start A major UK organisation is seeking an experienced Cyber Incident Response Lead to join a critical cyber security function and take ownership of major cyber incidents from day one. This is an urgent requirement for a hands-on incident response specialist with a proven track record leading Priority 1 (P1) cyber incidents, driving effective response activities, coordinating technical teams, and providing clear leadership during high-pressure situations. Working within a fast-paced environment, you will play a key role in protecting business operations, managing cyber crises, and ensuring...

Learn more

Cyber Resilience & Regulatory Consultant

Added 22/10/2026

Cyber Resilience & Regulatory Consultant 📍 Dublin City Centre (Hybrid) 💰 €85,000 per annum + benefits 📅 12-Month contractThe OpportunityAn exciting opportunity has arisen to join a large-scale cybersecurity and resilience programme focused on protecting critical digital services and infrastructure.This role will suit professionals with experience in cybersecurity regulation, digital resilience, governance, public policy, compliance, or risk management who want to play a key role in shaping organisational readiness for evolving cyber regulations and resilience requirements.Key ResponsibilitiesSupport the implementation and oversight of cybersecurity and resilience frameworks including NIS2, DORA and related regulatory requirements.Analyse legislation, standards and policy developments impacting cyber...

Learn more

Cyber Programme Manager

Added 10/07/2026

Cyber Security Programme ManagerDuration: 12 month rolling day rate contract 600-700 per day Location: Dublin Onsite Requirement: 3 to 4 days onsite per weekSummary of RoleWe're looking for an experienced Information Security Programme Manager to lead and deliver a broad range of cyber security initiatives within a growing organisation.This is a hands-on leadership role where you'll drive security improvements, strengthen governance, manage security risks, and support major technology change programmes.You'll work closely with IT teams, business stakeholders, and external partners to ensure security remains a core part of the organisation's strategy and operations.Key ResponsibilitiesLead information security projects and programmes from...

Learn more

Cyber Programme Manager (TVM)

Added 10/07/2026

Cyber Programme Manager (Threat and Vulnerability management)Duration: 6 month rolling day rate contract Type: Day rate contract 600-700 per day Location: Dublin Onsite Requirement: Hybrid working model (3 days per week onsite)Summary of RoleIn this role, you will:Lead and enhance a large-scale Threat & Vulnerability Management (TVM) function within a complex enterprise environment.Drive the organisation's approach to vulnerability identification, risk prioritisation, remediation governance, and continuous security improvement.Serve as the senior owner of the vulnerability management operating model, ensuring security risks are managed effectively across infrastructure, cloud, and application estates.Act as the principal point of contact between cyber security, technology teams,...

Learn more

AI Security Engineer

Added 14/10/2026

AI Security EngineerJob InformationJob Title: AI Security Engineer Type: Contract 1 year renewable Sub-Business Unit: Technology Assurance Location / Coverage: Abu DhabiJob PurposeEngineer and validate security controls for AI/ML and agentic AI services used by the organization, including Azure AI Services, Azure OpenAI, Azure Machine Learning, AI-enabled applications, and third-party AI platforms. The role protects sensitive and regulated data, identities, models, APIs, integrations, and AI infrastructure throughout the AI lifecycle.Primary ResponsibilitiesMaintain an inventory of AI/ML assets, models, inference endpoints, agents, connectors, plugins, training pipelines, and supporting infrastructure.Perform security reviews for Azure OpenAI, Azure AI Foundry/Services, Azure Machine Learning, and approved...

Learn more

Application Security Engineer

Added 09/10/2026

Application Security Engineer Reports toBusiness Information Security Officer (BISO)Role SummaryWe are seeking a hands-on Application Security Engineer to strengthen the security of software products, platforms, APIs, cloud services, and supporting development practices. The role embeds security throughout the software development lifecycle by partnering with product, architecture, engineering, and platform teams to prevent, identify, and remediate vulnerabilities early.The successful candidate combines strong software engineering capability with practical application security expertise and enables development teams through automation, reusable patterns, coaching, and risk-based guidance rather than acting as a late-stage approval gate. The role supports a secure-by-design approach in which software producers take...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.