Senior SOC Detection Engineer for Sentinel & Splunk

Sopra Steria; Farnborough; Hybrid; GBP 70,000 - 85,000; Full time

Benefits offered by this job

25 days annual leave

Life insurance

Pension matching (up to 6%)

Private medical cover

Flexible benefits

Job summary

Senior SOC Engineer (Detection) at Sopra Steria delivers high-quality detections across Microsoft Sentinel and Splunk, turning threat intel into actionable logic and reducing false positives in a live SOC.

The role is hybrid, requiring 2 days in Farnborough and 3 days at home, with SC Clearance eligibility. You’ll design, test and tune detections and collaborate with threat intelligence and security architecture teams to protect critical systems.

Qualifications

• Hands-on SOC/detection engineering experience required.
• ]},
• job_responsibilities_description sentence1:
• }]},
• CoT_job_summary_short
• job_summary_short

Responsibilities

• Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM.
• Write and optimise detection logic using KQL and SPL.
• Turn monitoring requirements into effective detections.
• Tune alerts to reduce false positives and improve SOC efficiency.
• Validate detections against telemetry for accuracy.
• Onboard log sources across cloud, infrastructure, identity and network.
• Collaborate with SOC, Threat Intelligence and Security Architecture teams.
• Investigate detection issues and improve performance.
• Drive continuous improvement through automation and scripting.
• Document detections for operational use.

Skills

KQL

SPL

Microsoft Sentinel

Splunk

SIEM engineering

Threat analysis

Threat intelligence

Automation

Scripting

Education

Relevant security/engineering degree or equivalent

Tools

Microsoft Sentinel

Splunk

Job description

Senior SOC Engineer (Detection) at Sopra Steria delivers high-quality detections across Microsoft Sentinel and Splunk, turning threat intel into actionable logic and reducing false positives in a live SOC.

The role is hybrid, requiring 2 days in Farnborough and 3 days at home, with SC Clearance eligibility. You’ll design, test and tune detections and collaborate with threat intelligence and security architecture teams to protect critical systems.