Senior SOC Detection Engineer — Threat-Led Detection & Automation

Gazelle Global Consulting Limited; West Midlands; Hybrid; GBP 75.000 - 95.000; Vollzeit

Zusammenfassung

Gazelle Global Consulting Limited is seeking a Senior SOC Detection Engineer for a 6-month contract with hybrid working patterns in the UK. Roles include designing advanced threat-led detections, translating intelligence into detection logic and collaborating across SOC teams.

The role focuses on attacker behavior analytics, detection coverage and automation, rather than day-to-day SIEM administration, with locations in Leamington Spa, Manchester or Warrington.

Qualifikationen

• Strong hands-on experience in SOC Detection Engineering, including detection rule development, validation, tuning and lifecycle management.
• Excellent knowledge of MITRE ATT&CK, attacker TTPs, behavioural analytics and threat-led detection methodologies.
• Experience translating cyber threat intelligence, threat modelling and threat hunting findings into operational detection logic.
• Practical experience developing detection content using KQL, SPL, Sigma, Python and PowerShell.
• Strong understanding of security telemetry across endpoint, identity, cloud, network, authentication and application environments.
• Experience with detection correlation, threat analysis and Detection-as-Code methodologies.
• Strong understanding of incident response, threat hunting, attack investigation and detection effectiveness.
• Knowledge of Active Directory, IAM, cloud security, endpoint security, network security and email security.
• Ability to identify monitoring gaps, improve detection coverage and reduce false positives.
• Experience collaborating with SOC, Threat Intelligence, Incident Response and offensive security teams.

Aufgaben

• Design, develop and maintain threat-led detection rules aligned with MITRE ATT&CK and organisational threat models.
• Translate threat intelligence, threat hunting insights, red/purple team findings and incident investigations into effective detection use cases.
• Develop behavioural, risk-based and correlated detections across endpoint, identity, cloud, network, email and application telemetry.
• Continuously tune and optimise detection logic to improve detection accuracy, reduce false positives and strengthen SOC effectiveness.
• Assess detection coverage, identify telemetry gaps and define requirements for improved security monitoring.
• Validate detection capabilities through attack simulation, purple teaming and adversary emulation.
• Maintain detection documentation, version control and engineering standards, including Detection-as-Code practices.
• Collaborate with Threat Intelligence, Threat Hunting, Incident Response, Red Team and SOC Operations teams.
• Develop automation for detection testing, validation, reporting and lifecycle management.
• Identify opportunities to automate repetitive SOC analyst activities.
• Contribute to AI-enabled detection hypothesis generation and automated rule creation pipelines.

Kenntnisse

SOC Detection

MITRE ATT&CK

Threat analytics

KQL

SPL

Sigma

Python

PowerShell

Threat modelling

Detection automation

Ausbildung

Cybersecurity / CS degree

Tools

Microsoft Sentinel

Splunk

Elastic

Jobbeschreibung

Gazelle Global Consulting Limited is seeking a Senior SOC Detection Engineer for a 6-month contract with hybrid working patterns in the UK. Roles include designing advanced threat-led detections, translating intelligence into detection logic and collaborating across SOC teams.

The role focuses on attacker behavior analytics, detection coverage and automation, rather than day-to-day SIEM administration, with locations in Leamington Spa, Manchester or Warrington.