Senior SIEM & Threat Detection Engineer

UK Home Office; Sheffield; Hybrid; GBP 50,000 - 57,000; Full time

Benefits offered by this job

Civil Service Pension (employer 28.97%

In-year reward scheme

25 days annual leave

8 public holidays + 1 privilege day

Hybrid work arrangement (60% in office

Job summary

UK Home Office in the United Kingdom seeks a Senior Technical Detection Analyst within the Cyber Security Operations Centre (CSOC). The role focuses on improving SIEM detection and monitoring capabilities to strengthen cyber threat detection and response.

You will develop, test, maintain and improve SIEM monitoring/detection content using threat intelligence and operational insights, and drive improvements across detection coverage and incident response.

Qualifications

• Experience in a Security Operations Centre environment with investigation of malicious activity.
• Ability to develop, maintain and improve SIEM monitoring/detection content using threat intelligence.
• Strong communication and collaboration across teams and stakeholders.

Responsibilities

• Carry out security monitoring, detection and response activities to standards.
• Identify and investigate indicators of malicious activity across networks and systems.
• Triage security events, support investigations and improve monitoring controls.
• Support incident response, red teaming and threat hunting activities.
• Develop and improve monitoring use cases and alert effectiveness across security technologies.
• Define and enhance processes, tooling and controls to identify emerging threats.

Skills

SIEM monitoring

Threat intelligence

Security Operations Centre

Incident response

Team leadership

Threat hunting

Tools

SIEM platforms

Job description

UK Home Office in the United Kingdom seeks a Senior Technical Detection Analyst within the Cyber Security Operations Centre (CSOC). The role focuses on improving SIEM detection and monitoring capabilities to strengthen cyber threat detection and response.

You will develop, test, maintain and improve SIEM monitoring/detection content using threat intelligence and operational insights, and drive improvements across detection coverage and incident response.