Threat Detection Engineer

In this role you design, develop and optimise advanced cyber threat detection capabilities to strengthen client security across complex environments. You work with SOC teams and stakeholders to translate threat intelligence into practical detection rules and use cases. You will influence engineering practices, mentor peers and deliver impactful security improvements. This position offers a collaborative, expert community and opportunities to innovate within CGI’s security-focused elite. You will contribute to protecting critical infrastructure while advancing your own skills in a supported, growth-oriented culture.

• competitive salary
• excellent pension
• private healthcare
• share scheme (3.5% + 3.5% matching)
• UK Security Check (SC) eligibility support
• inclusive, diverse community

• Design, develop, test and tune SIEM detection rules across multiple platforms
• Translate cyber threat intelligence into actionable detection use cases aligned with MITRE ATT&CK
• Provide expert security consultancy to clients translating requirements into engineering solutions
• Lead detection engineering activities on enterprise-scale security projects
• Collaborate with SOC teams and stakeholders to strengthen coverage and operational effectiveness
• Mentor and guide technical colleagues and act as escalation point
• Maintain detection use case libraries, rule repositories, and documentation
• Identify opportunities to automate detection workflows and improve processes

• Detection Engineering: develop, test and tune detection rules across SIEMs
• Hands-on knowledge of at least one SIEM platform: Microsoft Sentinel, FortiSIEM, Elastic or ArcSight
• Experience in SOC operations and security monitoring
• Strong threat intelligence understanding and its application to detections
• Knowledge of MITRE ATT&CK and its use in monitoring
• Agile delivery experience and version control (Git)
• Security architecture awareness for scalable implementations
• Effective technical consultancy and stakeholder engagement
• Strong problem-solving and independent delivery capabilities

• Strong communication
• Collaborative mindset
• Analytical mindset
• SIEM platforms: Microsoft Sentinel, FortiSIEM, Elastic, ArcSight
• Threat intelligence and detection engineering
• MITRE ATT&CK mapping