Senior Security Engineer - Remote Detection & SIEM

Made Tech; Manchester; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

30 days Holiday

Flexible Working Hours

Flexible Parental Leave

Remote Working

Paid counselling

Job summary

Made Tech is seeking a Senior Security Engineer to own end‑to‑end security for our government‑grade services. You will build detection logic and tuning across Splunk, YARA, and EDR, while shaping security via automation and tooling in a live SOC.

You will translate risk for civil servants and system owners, mentor engineers, and lead monitoring pipelines across Cribl, Kinesis, and AWS/GCP/Azure platforms. This is a delivery‑driven security role with impact on public sector projects.

Qualifications

• Hands-on cloud security experience — AWS, Azure, or GCP.
• Advanced Splunk (SPL); YARA, and EDR detection logic.

Responsibilities

• Build and tune detection rules across Splunk (SPL), YARA and EDR platforms.
• Coverage and quality: map detections to MITRE ATT&CK; track signal-to-noise and false‑positive rates to keep alerting high‑fidelity.
• Validation: ensure detections are accurate and actionable.
• Feedback loops: work with L1–L3 analysts so detections stay grounded in operational reality.
• Pipelines: manage log ingestion on Cribl — routing, filtering, normalisation, and enrichment at the edge.
• Optimisation: reduce volume via deduplication, trimming, and NetFlow summarisation; manage streaming/storage (Kinesis, S3, Amazon Security Lake).
• Standards: apply hot/warm/cold data tiering; normalise into OCSF; enforce encryption and least‑privilege access.
• Translation: turn technical risk into business/policy terms for civil servant stakeholders.
• Mentorship: support junior/mid-level engineers and act as a technical point of contact across teams.

Skills

Cloud security

Threat detection concepts

Tools

Splunk (SPL)

YARA

EDR detection

Cribl

Kinesis

S3

Amazon Security Lake

OCSF/data normalisation

Job description

Made Tech is seeking a Senior Security Engineer to own end‑to‑end security for our government‑grade services. You will build detection logic and tuning across Splunk, YARA, and EDR, while shaping security via automation and tooling in a live SOC.

You will translate risk for civil servants and system owners, mentor engineers, and lead monitoring pipelines across Cribl, Kinesis, and AWS/GCP/Azure platforms. This is a delivery‑driven security role with impact on public sector projects.