Senior SOC Detection Engineer

Made Tech Group; United Kingdom; Teletrabalho; GBP 80 000 - 120 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Smart Tech scheme

Cycle to work scheme

Health care allowance

Resumo da oferta

Made Tech Limited is recruiting a Senior Security Engineer - Monitoring & Detection to take end-to-end ownership of securing the systems we build for UK public sector clients. You will build and tune detection logic in a live SOC and own the pipelines feeding it, working hands-on across SIEM/detection and log ingestion/normalisation.

This delivery role requires translating technical risk into government-friendly decisions, collaborating with analysts and system owners, and implementing security

Qualificações

• Hands-on cloud security experience — AWS, Azure, or GCP.
• Either: Advanced Splunk (SPL); YARA, and EDR detection logic.
• Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation.
• Strong grasp of Zero Trust, identity-first security, secrets management, and network segmentation.
• Experience working with or alongside UK Government / public sector stakeholders.

Responsabilidades

• Build & tune detection rules across Splunk (SPL), YARA and EDR platforms.
• Map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high-fidelity.
• Test new/updated rules via replay and load testing; run red-team scenarios for critical rules.
• Work with L1–L3 analysts to ensure detections reflect operational reality.
• Manage log ingestion on Cribl — routing, filtering, normalisation, and enrichment at the edge.
• Reduce volume via deduplication, trimming, and NetFlow summarisation; manage streaming/storage (Kinesis, S3, Amazon Security Lake).
• Apply hot/warm/cold data tiering; normalise into OCSF; enforce encryption and least-privilege access.
• Translate technical risk into business/policy terms for civil servant stakeholders and system owners.
• Support junior/mid-level engineers as a technical point of contact across teams.

Conhecimentos

Cloud security

Splunk SPL

YARA

EDR detection

Cribl

Kinesis

S3

Security Lake

Ferramentas

EC2/AWS

Descrição da oferta de emprego

Made Tech Limited is recruiting a Senior Security Engineer - Monitoring & Detection to take end-to-end ownership of securing the systems we build for UK public sector clients. You will build and tune detection logic in a live SOC and own the pipelines feeding it, working hands-on across SIEM/detection and log ingestion/normalisation.

This delivery role requires translating technical risk into government-friendly decisions, collaborating with analysts and system owners, and implementing security