Threat Detection Platform Engineer

Cadent Gas Ltd
Job Purpose
- Provide additional support to the team.
- Communicate the benefits of your recommendations across departments and help to address any uncertainty and concern.
- Analyse large datasets, draw valid inferences and present them successfully to management using a reporting tool.
- Broad knowledge of Cadent’s core policies and procedures that impact the way we operate.
- Understand and document detailed business requirements using appropriate tools and techniques.
- Excellent understanding of the way the organisation works and the sector it operates in
- Actively demonstrate and promote the Cadent values, and positively contribute to a customer-oriented approach.
- Use data modelling practices to analyse your findings and create suggestions for strategic and operational improvements and changes.
- Be inquisitive with an interest in developing existing skill set and learning new skills.
- Consult with internal and external stakeholders to fully understand data content.
- Demonstrate an inclusive work ethic
Key Responsibilities
Functional Accountabilities
- Design, develop, and maintain the organization's Threat Detection Platform infrastructure.
- Accountable for Implementation and configuration of security tools and technologies for Threat Detection, including SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection System/Intrusion Prevention System), EDR (Endpoint Detection and Response), and others.
- Accountable for management of integrations with OT assets ensuring detection logic is appropriate for our OT/IT environment and associated threat landscape.
- Accountable for the development, implementation, and continuous improvement of the OT/IT Threat Detection Platform.
- Extending visibility of cyber threats beyond basic detection processes
- Accountable for optimising CSOC security monitoring tools and developing detection rules based on use cases derived from threat modelling.
Specialist Accountabilities
- Collaborate with cybersecurity analysts to define and implement detection rules, use cases, and playbooks within the platform.
- Monitor and analyse security event data to identify potential security incidents or threats.
- Develop custom scripts, queries, and integrations to enhance the functionality and effectiveness of the Threat Detection Platform.
- Stay informed about the latest trends and developments in cybersecurity Threat Detection techniques, tools, and technologies.
Skills and Experience
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field. (Master's degree preferred)
- Proven experience working as a Threat Detection Platform Engineer or in a similar role within the cybersecurity field.
- In-depth knowledge of security tools and technologies used for Threat Detection, such as SIEM, IDS/IPS, EDR, etc.
- Hands-on experience with implementing and managing Threat Detection Platforms, preferably with tools like Splunk, ELK Stack, QRadar, etc.
- Strong programming/scripting skills (e.g., Python, PowerShell) for automation and customization of security tools and platforms.
- Familiarity with cybersecurity frameworks and best practices (e.g., NIST Cybersecurity Framework, MITRE ATT&CK Framework).
- Excellent analytical and problem-solving skills with a keen attention to detail.
- Strong communication and collaboration skills to work effectively with cross-functional teams.
- Relevant certifications such as CISSP, GIAC or equivalent are a plus

Proud member of the Disability Confident employer scheme