Senior Detection Engineer for SOC Automation

Infosec; Basingstoke; Hybrid; GBP 56,000 - 80,000; Full time

Benefits offered by this job

Salary up to £80,000

Bonuses

Hybrid work

Job summary

Infosec is seeking a Senior Security Engineering Consultant for a hands-on, technical role in the Security Operations domain. You will design and deliver detection rules across SIEM/XDR, tune logic with KQL, and align use cases to MITRE ATT&CK.

You will also implement SOAR automations and incident response playbooks for customer engagements. The role is hybrid in the UK with ad-hoc travel to customer sites and occasional visits to the Basingstoke area.

Qualifications

• +Hands-on SIEM engineering with rule tuning; Microsoft Sentinel preferred.
• +Experience designing SOAR automations and playbooks (e.g., Logic Apps, XSOAR).
• +Scripting in Python/PowerShell with API integration.
• +Design detection use cases aligned to MITRE ATT&CK.

Responsibilities

• Design and deliver detection rulesets across SIEM and XDR platforms.
• Develop and tune detection logic using KQL or equivalent query languages.
• Design detection use cases aligned to MITRE ATT&CK and real-world techniques.
• Map customer log sources to detection use cases and identify gaps.
• Design and implement SOAR automations, integrations and response workflows.
• Develop and document incident response playbooks aligned to detections.

Skills

SIEM engineering

SOAR automation

Python scripting

KQL / detection logic

MITRE ATT&CK

Customer-facing

Azure cloud security

Communication

Tools

Logic Apps

Cortex XSOAR

Palo Alto XSOAR

Microsoft Sentinel

CrowdStrike

Vectra AI

Corelight

Job description

Infosec is seeking a Senior Security Engineering Consultant for a hands-on, technical role in the Security Operations domain. You will design and deliver detection rules across SIEM/XDR, tune logic with KQL, and align use cases to MITRE ATT&CK.

You will also implement SOAR automations and incident response playbooks for customer engagements. The role is hybrid in the UK with ad-hoc travel to customer sites and occasional visits to the Basingstoke area.