Senior Detection Engineer - SIEM/XDR & SOAR (Remote)

Nomios UK&I; Basingstoke; Hybrid; GBP 70,000 - 110,000; Full time

Benefits offered by this job

Office snacks

Free drinks

Breakfast items

Takeaway Fridays

Job summary

Nomios UK&I is expanding its Security Operations team and seeks a Senior Security Engineering Consultant to design and deliver detection and response capabilities across SIEM, XDR and SOAR. You will own detection-as-code, build reusable automations, and guide customers on improving visibility and coverage.

Travel to client sites and the Basingstoke office may be required in this hybrid role. This hands-on role combines engineering with advisory duties, delivering high-quality outcomes and

Qualifications

• Hands-on SIEM engineering with detection rule development.
• Experience writing detection logic using KQL or similar query languages.
• Proven SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similar.
• Scripting and automation using Python/PowerShell, including API work.
• Experience designing detection use cases aligned to MITRE ATT&CK.
• Understanding of log sources mapping to attack lifecycle.

Responsibilities

• Design and deliver detection rulesets across SIEM and XDR platforms.
• Develop and tune detection logic using KQL or equivalent languages.
• Design detection use cases aligned to MITRE ATT&CK and real-world techniques.
• Map customer log sources to detection use cases to assess coverage.
• Design and implement SOAR automations, integrations and response workflows.
• Develop and document incident response playbooks aligned to detection outputs.
• Translate threat intel into improved detections and automations.
• Deliver detection as code pipelines with use case development and versioning.
• Produce clear technical deliverables like use case catalogues and coverage assessments.

Skills

SIEM engineering

Detection engineering

MITRE ATT&CK

SOAR automation

Python scripting

XDR/EDR

Customer-facing

Tools

Microsoft Sentinel

Cortex XSOAR

Logic Apps

PowerShell

Job description

Nomios UK&I is expanding its Security Operations team and seeks a Senior Security Engineering Consultant to design and deliver detection and response capabilities across SIEM, XDR and SOAR. You will own detection-as-code, build reusable automations, and guide customers on improving visibility and coverage.

Travel to client sites and the Basingstoke office may be required in this hybrid role. This hands-on role combines engineering with advisory duties, delivering high-quality outcomes and