Senior SIEM Detection Engineer | Threat Hunting | Hybrid

UK Home Office; Salford; Hybrid; GBP 50,000 - 57,000; Full time

Benefits offered by this job

Civil Service Pension

In-year reward scheme

25 days annual leave

Office/home hybrid 60% in office

Job summary

UK Home Office is seeking a Senior Response Manager/Senior Technical Detection Analyst to enhance SIEM detection and monitoring within the Cyber Security Operations Centre. The role focuses on threat-informed detection engineering and improving detection coverage across networks, systems and applications.

Hybrid role with 60% time on site, UK residency requirement and SC/NPPV3 clearance. Salary £49,850 plus up to £7,550 skills allowance, with a strong emphasis on incident response, red teaming

Qualifications

• Experience in security operations centres and investigations.
• Developing or improving SIEM monitoring and detection content using threat intel and operational insights.
• Excellent written and verbal communication across audiences.

Responsibilities

• Carry out security monitoring, detection and response in line with standards; advise on mitigation and risk reduction.
• Identify, analyse and investigate indicators of malicious activity across networks, systems and applications.
• Triage security events and alerts; support investigations and enhance monitoring controls and detection coverage.
• Support incident response activities including red teaming and threat hunting; share investigation outcomes and lessons learned.
• Develop, review and improve monitoring use cases, detection content and alert effectiveness.
• Define and enhance processes, tooling and security controls to identify emerging threats and strengthen detection capabilities.
• Drive service and process improvements using best practices and problem-solving in security operations.

Skills

SOC investigations

SIEM detection

Communication skills

Stakeholder management

Team management

Threat intel

Job description

UK Home Office is seeking a Senior Response Manager/Senior Technical Detection Analyst to enhance SIEM detection and monitoring within the Cyber Security Operations Centre. The role focuses on threat-informed detection engineering and improving detection coverage across networks, systems and applications.

Hybrid role with 60% time on site, UK residency requirement and SC/NPPV3 clearance. Salary £49,850 plus up to £7,550 skills allowance, with a strong emphasis on incident response, red teaming