Lead SIEM/XDR Detection Engineer – SOAR Automation (Hybrid)

Stott and May Inc.; England; Hybrid; GBP 70,000 - 80,000; Full time

Job summary

Stott and May Inc. is seeking a Senior Security Engineering Consultant to lead detection and response design for SIEM, XDR, and SOAR. You will craft detections, automations, and playbooks, aligning with MITRE ATT&CK and working directly with clients to improve visibility and maturity.

The role is hybrid in the UK, with main activity remote and occasional visits to the Hampshire/South East office for team and business needs. Strong scripting, cloud security, and consulting skills are essential.

Qualifications

• Senior level role focused on detection and response across SIEM, XDR, and SOAR.
• Design and deliver detection rules, automations, and playbooks.
• Customer-facing consultancy and strong technical communication.
• MITRE ATT&CK-aligned use case design and log-source mapping.

Responsibilities

• Build and tune SIEM/XDR detections using KQL and related languages.
• Map and normalise log sources, assess coverage, close gaps.
• Create SOAR automations and incident playbooks for SOC teams.
• Turn threat intel into stronger detections and automations.
• Own detection-as-code pipelines and use case development.
• Advise customers, run workshops, and deliver strategies and catalogs.

Skills

Hands-on SIEM detection engineering

SOAR automation and playbooks

Python, PowerShell scripting

MITRE ATT&CK-aligned use cases

XDR/EDR experience with vendor tools

Azure cloud security telemetry

Customer-facing consultancy skills

Tools

Microsoft Sentinel

Logic Apps

Cortex XSOAR

PowerShell

Job description

Stott and May Inc. is seeking a Senior Security Engineering Consultant to lead detection and response design for SIEM, XDR, and SOAR. You will craft detections, automations, and playbooks, aligning with MITRE ATT&CK and working directly with clients to improve visibility and maturity.

The role is hybrid in the UK, with main activity remote and occasional visits to the Hampshire/South East office for team and business needs. Strong scripting, cloud security, and consulting skills are essential.