Senior SOC Detection Engineer (Sentinel & Splunk) – Hybrid

Sopra Steria Ltd; Farnborough; Hybrid; GBP 72,000 - 88,000; Full time

Benefits offered by this job

25 days annual leave

Life Insurance

Pension (matched up to 6%)

Private medical cover

Flex benefits

Job summary

Sopra Steria Ltd in Farnborough is hiring a Senior SOC Engineer (Detection) to design and deliver high-quality detections across Microsoft Sentinel and Splunk. This hands-on role focuses on turning threat intel into detection logic and improving real-time SOC operations.

The role is hybrid (2 days in Farnborough, 3 days at home) and requires SC Clearance eligibility. Salary up to £80K with benefits including 25 days leave, life insurance, pension, and private medical cover.

Qualifications

• Experience in SOC or SIEM engineering.
• Strong hands-on experience with Microsoft Sentinel and Splunk.
• Solid knowledge of KQL and SPL.
• Experience building, testing and maintaining detection rules.
• Good understanding of SIEM lifecycle management and security telemetry.
• Knowledge of cloud environments and IT infrastructure.
• Familiarity with frameworks such as MITRE ATT&CK.
• Ability to analyse threats and translate them into detection capability.

Responsibilities

• Develop, test and deploy detection content across Microsoft Sentinel and Splunk SIEM.
• Write and optimise detection logic using KQL and SPL.
• Turn monitoring requirements and use cases into effective, actionable detections.
• Tune alerts to reduce false positives and improve SOC efficiency.
• Validate detections against telemetry and ensure accuracy.
• Support onboarding of log sources across cloud, infrastructure, identity and network.
• Collaborate with SOC, Threat Intelligence and Security Architecture teams.
• Investigate detection issues and improve performance and reliability.
• Drive continuous improvement using automation, scripting and best practice.
• Ensure detections are clearly documented and operationally usable.

Skills

SOC engineering

KQL

SPL

Microsoft Sentinel

Splunk

Detection rules

CI/CD

PowerShell

Python

MITRE ATT&CK

Threat intel

Tools

Git

Logic Apps

Splunk

MS Sentinel

PowerShell

Job description

Sopra Steria Ltd in Farnborough is hiring a Senior SOC Engineer (Detection) to design and deliver high-quality detections across Microsoft Sentinel and Splunk. This hands-on role focuses on turning threat intel into detection logic and improving real-time SOC operations.

The role is hybrid (2 days in Farnborough, 3 days at home) and requires SC Clearance eligibility. Salary up to £80K with benefits including 25 days leave, life insurance, pension, and private medical cover.