Senior Security Engineering Consultant

InfoSec People Ltd; Basingstoke; Hybrid; GBP 75,000 - 110,000; Full time

Benefits offered by this job

Hybrid working model

Competitive salary

Comprehensive employee benefits

Career growth opportunities

Exposure to modern Security Operations

Diverse client environments

Ongoing professional development

Job summary

InfoSec People Ltd is seeking a Senior Security Engineering Consultant to join a growing professional services team focused on strengthening Security Operations capabilities. You will design and deliver advanced detection, response, and automation solutions across client environments, blending deep technical expertise with advisory duties.

This senior, customer-facing role leads detection engineering across SIEM, XDR, and SOAR, develops content with MITRE ATT&CK mappings, and guides customers

Qualifications

• Hands-on experience in SIEM engineering and detection rule development.
• Experience building SOAR automations and response workflows.
• Proficiency in scripting (Python/PowerShell or similar).
• Ability to map detections to MITRE ATT&CK framework.
• Understanding of security telemetry and detection coverage.
• Experience with modern XDR/EDR technologies.
• Strong customer-facing consultancy or professional services background.
• Excellent communication and stakeholder engagement skills.

Responsibilities

• Design and implement detection rules across SIEM and XDR platforms.
• Develop detection logic using KQL and similar languages.
• Create threat detection use cases mapped to MITRE ATT&CK.
• Assess telemetry coverage and identify visibility gaps.
• Build and maintain detection-as-code pipelines and methodologies.
• Translate threat intelligence into actionable content and automations.
• Design and develop SOAR automations and integrations.
• Create incident response playbooks and workflows.
• Improve security operations through scripting and automation.
• Support customers in enhancing response maturity.
• Lead technical workshops and strategy sessions.
• Present findings and roadmaps to stakeholders.
• Collaborate with engineering teams to ensure delivery outcomes.

Skills

SIEM engineering

Detection rule development

SOAR automations

Python scripting

MITRE ATT&CK

Cloud security

Customer-facing consultancy

Tools

KQL

PowerShell

Python

API integrations

Job description

Are you passionate about cyber security, detection engineering, and automation? We're looking for a Senior Security Engineering Consultant to join a growing professional services team focused on helping organisations strengthen and mature their Security Operations capabilities.

This is a senior, customer-facing consultancy role where you'll design and deliver cutting-edge detection, response, and automation solutions across a variety of security technologies and client environments.

As a Senior Security Engineering Consultant, you'll work closely with customers to improve security monitoring, detection coverage, automation, and incident response capabilities.

You'll take a lead role in designing and implementing solutions across SIEM, XDR, and SOAR platforms, developing detection content, automating workflows, and helping organisations build scalable, effective Security Operations practices.

This role blends deep technical expertise with advisory and consulting responsibilities, making it ideal for someone who enjoys solving complex security challenges while working directly with customers.

What You'll Be Doing

Detection Engineering & Security Operations

• Design and implement detection rules across SIEM and XDR platforms
• Develop and optimise detection logic using KQL and similar query languages
• Create threat detection use cases mapped to the MITRE ATT&CK framework
• Assess security telemetry coverage and identify visibility gaps
• Build and maintain Detection-as-Code pipelines and methodologies
• Translate threat intelligence into actionable detection content and automations

Security Automation & Response

• Design and develop SOAR automations and integrations
• Create incident response playbooks and operational workflows
• Improve security operations through scripting and API-driven automation
• Support customers in enhancing response efficiency and operational maturity
• Act as a trusted advisor to customers
• Lead technical workshops and strategy sessions
• Present findings, recommendations, and security roadmaps to both technical and non-technical stakeholders
• Collaborate with engineering teams to ensure successful delivery outcomes

What We're Looking For

• Strong hands-on experience with SIEM engineering and detection rule development
• Demonstrable experience building SOAR automations and response workflows
• Scripting skills in Python, PowerShell, or similar languages
• Experience aligning detections to the MITRE ATT&CK framework
• Understanding of security telemetry, attack lifecycle visibility, and detection coverage
• Experience with modern XDR/EDR technologies
• Knowledge of Azure security monitoring and cloud-native security services
• Proven customer-facing consultancy or professional services experience
• Excellent communication and stakeholder engagement skills

Technical Expertise

• SIEM, XDR, EDR, and SOAR technologies
• Detection engineering and use-case development
• Security automation and orchestration
• API integrations and scripting
• Cloud security monitoring, particularly Azure
• Security operations processes and playbook development
• Emerging security technologies, including AI-driven security capabilities

What's on Offer

• Competitive salary and bonus structure
• Hybrid working model with flexibility
• Opportunity to work across diverse customer environments and technologies
• Exposure to modern Security Operations, detection engineering, and automation initiatives
• Collaborative and highly skilled technical team
• Ongoing professional development and career growth opportunities
• Comprehensive employee benefits package

If you're a security professional with a passion for detection engineering, automation, and helping organisations strengthen their cyber resilience, we'd love to hear from you. Join a team where you can make a real impact while working with leading security technologies and evolving cyber defence strategies.