{"id":141118,"url":"https://alion.io/job/checkout-com-senior-detection-threat-engineer","title":"Senior Detection & Threat Engineer","company":{"id":51355,"name":"Checkout.com","domain":"checkout.com","url":"https://alion.io/company/checkout-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":{"grade":"A","score":92,"open_postings":18,"ghost_share":0,"stale_share":0.278,"repost_share":0.056,"time_to_fill_p50_days":47,"computed_at":"2026-10-17T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":87000,"max_usd":161000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":32},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CIS Benchmarks","optional":false},{"name":"ISO 27001","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"NIST CSF","optional":false},{"name":"PCI DSS","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-05-26T10:26:17Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-10-18T05:53:14Z","board_verified":true,"closed_at":null,"days_open":144,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":144},"description":"Company Description\nWe’re Checkout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. \nWe are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. \nWhether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. \nIf you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. \nWith 20 offices across six continents and London as our HQ, we’re shaping the future of fintech - and we’re just getting started.\nThe role\nYou will own and evolve the company’s threat detection and threat-hunting capability. This role defines what “good” looks like for detection and increasingly engineers it directly as capability shifts into Cyber Security.\nThis is not an alert-triage role. You are here to understand attacker behaviour, convert it into high-fidelity detection logic, and raise the security baseline for the entire organisation.\nYou will partner closely with Security Operations, GRC and Engineering-setting standards, direction, and expectations-while progressively taking ownership of the most complex and high-value detection and threat engineering work.\nWhat you’ll be responsible for\nEngineering high-fidelity threat detections across endpoint, identity, cloud, and SaaS\n\nDefining detection standards, principles, and quality thresholds for Security Operations\n\nConducting proactive threat hunting based on attacker behaviour, not vendor alerts\n\nTranslating threat intelligence and incident learnings into durable, reusable detections\n\nMapping detections to MITRE ATT&CK and real-world attack paths\n\nReducing alert fatigue through logic refinement, correlation, and contextual enrichment\n\nAdvising and supporting during high-severity security incidents; contribute to runbooks and escalation playbooks\n\nDriving the transition of advanced detection capability into Cyber Security ownership\n\nWhat we’re looking for\nProven experience in detection engineering, threat hunting, or advanced SOC roles\n\nDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycle\n\nHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel)\n\nProficienty with scripting and programmaining (e.g. Python, KQL) to build detection pipelines and automation\n\nWillingness to challenge bad detections, weak assumptions, and vanity metrics\n\nPragmatic mindset: precision and impact beat coverage theatre\n\nExperience operating beyond traditional SOC or MSSP models\n\nHands-on cloud detection experience (identity, control plane, SaaS)\n\nFamiliarity with threat intelligence platforms and frameworks such as PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud.\n\nAdditional Information\nBring all of you to work\nWe create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.\nHere, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.\nWe work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.\nIt’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.\nLife atCheckout.com\nWe understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.\nCurious about what it’s like to be part of our team? Visit ourCareers Page to learn more about our culture, open roles, and what drives us.\nFor a closer look at daily life at Checkout.com, follow us on LinkedIn and Instagram","description_format":"text","description_chars":4388,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Payment Processing & Gateways"],"lifecycle":[{"event":"open","at":"2026-05-26T10:26:17Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker, Senior or Specialist Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker; Global Business Mobility: Senior or Specialist Worker","cap_exempt":false,"checked_at":"2026-10-17T06:21:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.528,"p_room":0.28,"age_days":143,"expected_fill_days":47,"reasons":["conf:1","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/checkout-com-senior-detection-threat-engineer","json_url":"https://alion.io/job/checkout-com-senior-detection-threat-engineer.json","meta":{"generated_at":"2026-10-18T05:55:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8843,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-19T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51355},"rest":"https://alion.io/mcp/rest/get_company?id=51355"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcheckout-com-senior-detection-threat-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcheckout-com-senior-detection-threat-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcheckout-com-senior-detection-threat-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/checkout-com-senior-detection-threat-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcheckout-com-senior-detection-threat-engineer"}]}