Senior Microsoft Sentinel Detection Engineer

Sopra Steria; Farnborough; Hybrid; GBP 50,000 - 60,000; Full time

Benefits offered by this job

25 days annual leave

Health Shields

Life assurance

Pension

Job summary

Sopra Steria's Aerospace, Defence and Security business is seeking a Senior Detection Engineer to design, develop and refine Microsoft Sentinel detections, translating threat behaviours and security requirements into reliable analytics.

You'll own detection use cases through their lifecycle, collaborate with SOC analysts and platform engineers, and operate in a hybrid Farnborough environment (3 days on-site, 2 days at home) to strengthen coverage and reduce false positives.

Qualifications

• Strong hands-on experience with Microsoft Sentinel in a detection engineering or security engineering role.
• Advanced KQL skills, including building, troubleshooting and optimising queries across multiple data sources.
• Experience creating, testing, deploying and tuning scheduled analytics rules and other Sentinel detection content.
• A good understanding of detection engineering principles, false-positive reduction and the detection content lifecycle.

Responsibilities

• Design, develop and maintain Microsoft Sentinel analytics rules using KQL.
• Translate threat intelligence, attacker behaviours and operational requirements into measurable detection use cases.
• Map detection content to the MITRE ATT&CK framework and help identify gaps in detection coverage.
• Validate required log sources, schemas and field mappings before developing detection logic.
• Test detections against representative data and document expected results, limitations and test evidence.
• Tune analytics to reduce false positives while preserving detection fidelity and query performance.
• Manage detection content through peer review, controlled deployment, versioning and ongoing lifecycle maintenance.
• Work with SOC analysts, threat intelligence and platform engineers to improve detections using operational feedback.
• Support threat hunting, retrospective searches and investigations using Microsoft Sentinel and KQL.
• Contribute to detection engineering standards, governance, coverage reporting and continuous improvement.

Skills

Microsoft Sentinel

KQL

Detection engineering

MITRE ATT&CK mapping

Git-based version control

Azure DevOps

CI/CD

Troubleshooting

Analytical thinking

Tools

Azure DevOps

Logic Apps

PowerShell

Python

Terraform

Bicep

ARM templates

Job description

Sopra Steria's Aerospace, Defence and Security business is seeking a Senior Detection Engineer to design, develop and refine Microsoft Sentinel detections, translating threat behaviours and security requirements into reliable analytics.

You'll own detection use cases through their lifecycle, collaborate with SOC analysts and platform engineers, and operate in a hybrid Farnborough environment (3 days on-site, 2 days at home) to strengthen coverage and reduce false positives.