Senior SOC Analyst: Detection Engineer & Automation Lead

Franklin Fitch; Basingstoke; On-site; GBP 90,000 - 120,000; Full time

Job summary

Franklin Fitch is seeking a senior, hands-on cybersecurity consultant to help customers enhance and automate their SOC capabilities. You will design, build, and optimise detections across SIEM, XDR, and SOAR with a focus on detection engineering and automation.

Key responsibilities include developing detection rules for SIEMs (especially Microsoft Sentinel), building SOAR automations, and creating MITRE ATT&CK-aligned use cases.

Qualifications

• Experience designing and engineering SIEM solutions, preferably Microsoft Sentinel.
• Strong hands-on skills in KQL and detection rule development.
• Experience building automations in SOAR platforms.
• Proficiency in Python and PowerShell for API integrations and automation.
• Knowledge of MITRE ATT&CK framework for threat modeling.
• Experience with leading XDR/EDR platforms such as Defender XDR, CrowdStrike, Cortex XDR, or SentinelOne.
• Solid understanding of Azure security services and telemetry collection.
• Customer-facing consulting with excellent communication and stakeholder management skills.
• Ability to translate business requirements into effective security monitoring and detection strategies.

Responsibilities

• Design, develop, and optimise detection rules for SIEM and XDR platforms, focusing on Microsoft Sentinel.
• Build and maintain SOAR automations, incident response playbooks, and workflow integrations.
• Develop high-quality detections using KQL, Python, and PowerShell.
• Create detection use cases aligned with MITRE ATT&CK framework.
• Assess customer telemetry to identify visibility gaps and improve coverage.
• Lead Detection as Code pipelines with version-controlled content.
• Lead customer workshops and provide strategic SOC maturity advice.
• Collaborate with engineering, onboarding, and delivery teams to integrate detections and responses.
• Continuously refine detection content and automation standards for SOC effectiveness.

Skills

SIEM design

KQL

SOAR automation

Python

PowerShell

MITRE ATT&CK

XDR platforms

Azure security

Communication

Detection engineering

Tools

Microsoft Sentinel

Logic Apps

Cortex XSOAR

SentinelOne

CrowdStrike Falcon

Palo Alto Cortex XDR

Job description

Franklin Fitch is seeking a senior, hands-on cybersecurity consultant to help customers enhance and automate their SOC capabilities. You will design, build, and optimise detections across SIEM, XDR, and SOAR with a focus on detection engineering and automation.

Key responsibilities include developing detection rules for SIEMs (especially Microsoft Sentinel), building SOAR automations, and creating MITRE ATT&CK-aligned use cases.