Cyber Detection Content Engineer

Financial Service firm seeks a VP level - Detection Content Engineer to join Cyber Operations. Reporting to the Global Head, you'll take ownership of building and evolving the organisation's detection capability. This role is focused on identifying emerging threats before they become incidents by developing intelligent detection logic, enhancing security monitoring, and improving the effectiveness of the SOC. You'll work closely with Threat Intelligence, Security Operations and Engineering teams to ensure security controls remain relevant, accurate and aligned. In this role you will design and refine detection content within SIEM platforms, create dashboards that enable faster investigations, and ensure new technologies and data sources are integrated effectively. You'll also assess detection coverage against TTPs, improve the quality of security telemetry, support validation exercises such as Attack simulations, and automate repetitive processes using Python to increase operational efficiency. Acting as a key technical liaison across cyber teams, you'll help shape how security monitoring evolves across the business. To be considered for this role, you'll bring hands-on experience with SIEM technologies such as Splunk, an understanding of attacker tactics and frameworks like MITRE ATT&CK, and the ability to turn threat intelligence into practical detection strategies. Strong scripting skills, a collaborative mindset and a passion for continuously improving cyber resilience will be key to success in this role. This is a hybrid role (2 days in office) offering a base of up to $189,000 + target bonus of $45,000. #J-18808-Ljbffr Barclay Simpson