Senior SOC Detection Engineer – SIEM & Threat Hunting, Hybrid

83zero Ltd; Coventry; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

83zero Ltd is seeking a hands-on Senior SOC L3 Detection Engineer to strengthen our security operations in a hybrid Coventry environment. You will design and optimise SIEM detections, translate threat intel into practical rules and tune alerts to reduce false positives.

You'll onboard logs from enterprise environments, support complex investigations and threat hunting, and develop SOAR playbooks and security integrations. Experience with MITRE ATT&CK and Microsoft Sentinel is preferred.

Qualifications

• Hands-on detection engineering / SIEM engineering experience.
• Proven ability to write and tune detection logic.
• Strong knowledge of MITRE ATT&CK and cyber kill chain.
• Experience reducing false positives and improving alert fidelity.
• Experience with Microsoft Sentinel or CrowdStrike NG SIEM.

Responsibilities

• Design, build and optimise advanced SIEM detection rules and correlation logic.
• Translate threat intel and IOCs into detections.
• Tune alerts to reduce false positives.
• Onboard, parse and normalise security logs across environments.
• Support complex incident investigations and threat hunting.
• Develop SOAR playbooks, automation and integrations.
• Improve detection coverage and SOC efficiency.
• Work across SIEM, EDR/XDR, IAM and cloud tooling.
• Explore AI/agentic security use cases.

Skills

Detection engineering

SIEM engineering

Threat detection

MITRE ATT&CK

False positives reduction

Incident investigations

Threat hunting

SOAR & automation

Security integrations

Communication skills

Tools

Microsoft Sentinel

CrowdStrike NG SIEM

SOAR platforms

Job description

83zero Ltd is seeking a hands-on Senior SOC L3 Detection Engineer to strengthen our security operations in a hybrid Coventry environment. You will design and optimise SIEM detections, translate threat intel into practical rules and tune alerts to reduce false positives.

You'll onboard logs from enterprise environments, support complex investigations and threat hunting, and develop SOAR playbooks and security integrations. Experience with MITRE ATT&CK and Microsoft Sentinel is preferred.