Senior Security Engineer - SOC Detection & SIEM Automation

Made Tech Limited; Manchester; Hybride; GBP 75 000 - 110 000; Plein temps

Avantages offerts par ce poste

30 days Holiday

Flexible Working Hours

Flexible Parental Leave

Remote Working

Paid counselling

Résumé du poste

Made Tech Limited is seeking a Senior Security Engineer in our Cyber practice to own end-to-end security across our digital services for the UK public sector, embedding security into delivery pipelines and building tooling that keeps government services safe by default.

You will work hands-on across SIEM/detection, log ingestion and normalisation, and translate technical risk into decisions for civil servants and system owners, accelerating security assurance rather than slowing delivery.

Qualifications

• Hands-on cloud security experience - AWS, Azure, or GCP.
• Either: Advanced Splunk (SPL); YARA, and EDR detection logic.

Responsabilités

• Build & tune detection rules across Splunk (SPL), YARA and EDR platforms.
• Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high-fidelity.
• Validation: test new/updated rules via replay and load testing; run red-team scenarios for critical rules.
• Feedback loops: work with L1-L3 analysts so detections stay grounded in operational reality.
• Pipelines: manage log ingestion on Cribl - routing, filtering, normalisation, and enrichment at the edge.
• Optimisation: reduce volume via deduplication, trimming, and NetFlow summarisation; manage streaming/storage (Kinesis, S3, Amazon Security Lake).
• Standards: apply hot/warm/cold data tiering; normalise into OCSF; enforce encryption and least-privilege access.

Connaissances

Security engineering

Cloud security

SIEM / Splunk

EDR detection

YARA rules

Cribl data pipelines

Threat detection tuning

UK Government/public sector experience

Outils

Splunk SPL

YARA

EDR platforms

Description du poste

Made Tech Limited is seeking a Senior Security Engineer in our Cyber practice to own end-to-end security across our digital services for the UK public sector, embedding security into delivery pipelines and building tooling that keeps government services safe by default.

You will work hands-on across SIEM/detection, log ingestion and normalisation, and translate technical risk into decisions for civil servants and system owners, accelerating security assurance rather than slowing delivery.