Senior SIEM & Threat Hunting Engineer (Hybrid)

UK Home Office; Peterborough; Hybrid; GBP 50,000 - 57,000; Full time

Benefits offered by this job

Civil Service Pension

25 days annual leave

8 public holidays + 1 privilege day

Hybrid work pattern (60% on-site)

Job summary

UK Home Office's Cyber Security Operations Centre is seeking a Senior Technical Detection Analyst. Based in Peterborough/Salford/Sheffield with a hybrid pattern (60% on‑site), you will improve SIEM detection, develop detection content and leverage threat intelligence to strengthen monitoring.

You will lead investigations, triage alerts, support incident response and drive improvements to detection use cases and security controls while aligning with SC clearance requirements and residency rules.

Qualifications

• Experience in a Security Operations Centre environment.
• Developing, testing and improving SIEM monitoring content.
• Ability to analyse indicators across networks and systems.
• Effective verbal and written communication with diverse audiences.
• Experience managing a technical team.

Responsibilities

• Carry out security monitoring, detection and response activities in line with agreed standards.
• Identify, analyse and investigate indicators of malicious activity across networks, systems and applications.
• Triage security events and alerts, supporting investigations and improvements to monitoring controls.
• Support incident response activities, including red teaming and threat hunting exercises.
• Develop, review and improve monitoring use cases, detection content and alert effectiveness.
• Define and enhance processes, tooling and security controls to identify emerging threats.
• Drive service and process improvements to support efficient security operations.

Skills

SIEM monitoring

Threat detection

Incident response

Threat hunting

Communication

Team leadership

Tools

SIEM

Threat intelligence platforms

Job description

UK Home Office's Cyber Security Operations Centre is seeking a Senior Technical Detection Analyst. Based in Peterborough/Salford/Sheffield with a hybrid pattern (60% on‑site), you will improve SIEM detection, develop detection content and leverage threat intelligence to strengthen monitoring.

You will lead investigations, triage alerts, support incident response and drive improvements to detection use cases and security controls while aligning with SC clearance requirements and residency rules.