Remote Senior SOC Detection Engineer (Cloud Security)

Made Tech Limited; Manchester; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Smart Tech scheme

Cycle to work scheme

Health care allowance

Pension plan

Social and wellbeing events

Job summary

Made Tech Limited is seeking a Senior Security Engineer to own end-to-end security for government-grade services. You will embed security into delivery pipelines, build tooling, and drive detection engineering in a live SOC.

You will work hands-on across cloud security, detection logic, and data normalisation, translating technical risk into policy terms for civil servants and system owners. A delivery-focused security uplift is expected.

Qualifications

• Hands-on cloud security experience across AWS, Azure or GCP.
• Advanced Splunk (SPL); YARA and EDR detection logic.
• Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation.
• Strong grasp of Zero Trust, identity-first security, secrets management, and network segmentation.
• Experience working with UK Government/public sector stakeholders.

Responsibilities

• Build & tune detection rules across Splunk (SPL), YARA and EDR platforms.
• Map detections to MITRE ATT&CK; manage signal-to-noise and false positives.
• Test new/updated rules via replay and load testing; run red-team scenarios.
• Collaborate with L1-L3 analysts to ground detections in operations.
• Manage log ingestion pipelines on Cribl – routing, filtering and normalisation.
• Reduce volume via deduplication and data tiering; manage streaming/storage like Kinesis and S3.

Skills

Cloud security experience

Zero Trust

Identity-first security

Secrets management

Network segmentation

Public sector experience

Tools

Advanced Splunk (SPL)

YARA

EDR detection logic

Cribl

Kinesis

S3

Amazon Security Lake

OCSF/data normalisation

Job description

Made Tech Limited is seeking a Senior Security Engineer to own end-to-end security for government-grade services. You will embed security into delivery pipelines, build tooling, and drive detection engineering in a live SOC.

You will work hands-on across cloud security, detection logic, and data normalisation, translating technical risk into policy terms for civil servants and system owners. A delivery-focused security uplift is expected.