Senior SOC Detection Engineer - Hybrid, SC Clearance

Sopra Steria Ltd; Farnborough; Hybrid; GBP 68,000 - 92,000; Full time

Benefits offered by this job

25 days annual leave

Life Insurance

Pension

Car allowance

Private medical cover

Flex benefit

Job summary

Sopra Steria Ltd is seeking a Senior SOC Engineer (Detection) to design and deliver high‑quality detections across Microsoft Sentinel and Splunk for real‑time protection of critical systems and clients.

The role is hybrid, with 2 days in the Farnborough office and 3 days from home. You must be eligible for SC Clearance and be adept at turning threat intelligence into actionable detection logic.

Qualifications

• Experience in SOC engineering or SIEM engineering.
• Hands-on experience with Microsoft Sentinel and Splunk.
• Solid knowledge of KQL and SPL.
• Experience building, testing and maintaining detection rules.
• Good understanding of SIEM lifecycle management and security telemetry.
• Knowledge of cloud environments and IT infrastructure.
• Familiar with MITRE ATT&CK framework.
• Ability to analyse threats and translate to detections.

Responsibilities

• Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM.
• Write and optimise detection logic using KQL and SPL.
• Turn monitoring requirements and use cases into effective, actionable detections.
• Tune alerts to reduce false positives and improve SOC efficiency.
• Validate detections against telemetry and ensure accuracy.
• Support onboarding of log sources across cloud, infrastructure, identity and network.
• Collaborate with SOC, Threat Intelligence and Security Architecture teams.
• Investigate detection issues and improve performance and reliability.
• Drive continuous improvement using automation, scripting and best practice.
• Ensure detections are clearly documented and operationally usable.

Skills

SOC engineering

detection engineering

SIEM engineering

Microsoft Sentinel

Splunk

KQL

SPL

Detection rules

Threat intelligence

Tools

Microsoft Sentinel

Splunk

Job description

Sopra Steria Ltd is seeking a Senior SOC Engineer (Detection) to design and deliver high‑quality detections across Microsoft Sentinel and Splunk for real‑time protection of critical systems and clients.

The role is hybrid, with 2 days in the Farnborough office and 3 days from home. You must be eligible for SC Clearance and be adept at turning threat intelligence into actionable detection logic.