Senior SOC Detection Engineer - Sentinel & Splunk Expert

Sopra Steria Limited; Rushmoor; Hybrid; GBP 52,000 - 90,000; Full time

Benefits offered by this job

25 days annual leave

Life Insurance

Pension (matched contributions)

Flex benefit

Private medical cover

Allowance (ca £5400)

Job summary

Sopra Steria Limited is seeking a Senior SOC Engineer (Detection) to design and deliver high-quality detections across Microsoft Sentinel and Splunk, protecting critical systems in real time. The role is hybrid: 2 days in the Farnborough office and 3 days from home, with eligibility for SC Clearance.

You will translate threat intelligence into actionable detection logic, tune alerts, and collaborate across SOC, Threat Intelligence and Security Architecture teams to continually improve detection

Qualifications

• Experience in SOC engineering, detection engineering or SIEM engineering.
• Hands-on experience with Microsoft Sentinel and Splunk.
• Knowledge of KQL and SPL.
• Experience building, testing and maintaining detection rules.
• Understanding SIEM lifecycle management and telemetry.
• Familiarity with cloud environments and IT infrastructure.
• Knowledge of MITRE ATT&CK framework.

Responsibilities

• Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM.
• Write and optimise detection logic using KQL and SPL.
• Turn monitoring requirements and use cases into effective, actionable detections.
• Tune alerts to reduce false positives and improve SOC efficiency.
• Validate detections against telemetry and ensure accuracy.
• Onboard log sources across cloud, infrastructure, identity and network.
• Collaborate with SOC, Threat Intelligence and Security Architecture teams.
• Investigate detection issues and improve performance and reliability.
• Drive continuous improvement using automation, scripting and best practice.
• Ensure detections are clearly documented and operationally usable.

Skills

SOC engineering

Detection engineering

SIEM engineering

KQL

SPL

Detection rules

Threat analysis

Tools

Microsoft Sentinel

Splunk

Job description

Sopra Steria Limited is seeking a Senior SOC Engineer (Detection) to design and deliver high-quality detections across Microsoft Sentinel and Splunk, protecting critical systems in real time. The role is hybrid: 2 days in the Farnborough office and 3 days from home, with eligibility for SC Clearance.

You will translate threat intelligence into actionable detection logic, tune alerts, and collaborate across SOC, Threat Intelligence and Security Architecture teams to continually improve detection