SOC Detection Engineer

Gazelle Global Consulting Limited; Royal Leamington Spa, Manchester, Warrington; Ibrido; GBP 60.000 - 80.000; Part-time

Descrizione del lavoro

Gazelle Global Consulting Limited is seeking a SOC Detection Engineer to fortify threat-detection capabilities within a large enterprise. The role focuses on threat-led detection engineering, translating threat intel and investigation findings into precise detection logic, and improving visibility across endpoint, identity, cloud and network environments. Hybrid work pattern applies with 3 days in office.

Competenze

• Experience in threat-led detection engineering.
• Ability to translate threat intel into detections.
• Familiarity with SIEM platforms and detection tooling.

Mansioni

• Translate threat intelligence and hunter findings into detection logic.
• Develop and validate detections across enterprise environments.
• Tune detections to reduce false positives and improve visibility.

Conoscenze

Threat-led detection engineering

MITRE ATT&CK mapping

Threat intelligence

Detection development (KQL/SPL/Sigma)

Python automation

PowerShell automation

Security telemetry

Detection tuning & false positives

Detection-as-Code

Adversary emulation

SIEM platforms (Microsoft Sentinel,Spl

Descrizione del lavoro

SOC Detection Engineer

Location: Leamington Spa, Manchester or Warrington
Contract: 6 months
Working Pattern: Hybrid - 3 days in the office, 2 days remotely

I'm recruiting for a SOC Detection Engineer to strengthen threat detection capabilities across a large enterprise environment.

This is an opportunity to work on threat-led detection engineering, focusing on identifying sophisticated attacker behaviours and improving the effectiveness of security operations.

You'll translate threat intelligence, threat hunting findings, red team exercises and incident investigations into accurate detection logic. The focus is on engineering and improving detections rather than day-to-day SIEM administration or security tooling support.

Key Skills:

• Threat-led detection engineering and behavioural analytics


• MITRE ATT&CK mapping and adversary TTP analysis


• Threat intelligence, modelling and hunting


• Detection development using KQL, SPL or Sigma


• Python and PowerShell automation


• Security telemetry across endpoint, identity, cloud and network environments


• Detection tuning, validation and false-positive reduction


• Detection-as-Code and version control


• Attack simulation, purple teaming and adversary emulation


• Experience with SIEM platforms such as Microsoft Sentinel, Splunk or Elastic

This is an excellent opportunity for a detection specialist to make a tangible impact on enterprise cyber defence, developing and validating detections that improve visibility of emerging threats.