SOC Engineer

83zero Ltd; Coventry; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

83zero Ltd is seeking a hands-on Senior SOC L3 Detection Engineer to strengthen our security operations in a hybrid Coventry environment. You will design and optimise SIEM detections, translate threat intel into practical rules and tune alerts to reduce false positives.

You'll onboard logs from enterprise environments, support complex investigations and threat hunting, and develop SOAR playbooks and security integrations. Experience with MITRE ATT&CK and Microsoft Sentinel is preferred.

Qualifications

• Hands-on detection engineering / SIEM engineering experience.
• Proven ability to write and tune detection logic.
• Strong knowledge of MITRE ATT&CK and cyber kill chain.
• Experience reducing false positives and improving alert fidelity.
• Experience with Microsoft Sentinel or CrowdStrike NG SIEM.

Responsibilities

• Design, build and optimise advanced SIEM detection rules and correlation logic.
• Translate threat intel and IOCs into detections.
• Tune alerts to reduce false positives.
• Onboard, parse and normalise security logs across environments.
• Support complex incident investigations and threat hunting.
• Develop SOAR playbooks, automation and integrations.
• Improve detection coverage and SOC efficiency.
• Work across SIEM, EDR/XDR, IAM and cloud tooling.
• Explore AI/agentic security use cases.

Skills

Detection engineering

SIEM engineering

Threat detection

MITRE ATT&CK

False positives reduction

Incident investigations

Threat hunting

SOAR & automation

Security integrations

Communication skills

Tools

Microsoft Sentinel

CrowdStrike NG SIEM

SOAR platforms

Job description

Salary: 80,000 - 100,000
Location: Coventry (Hybrid)

We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection.

What you'll be doing

• Design, build and optimise advanced SIEM detection rules and correlation logic
• Translate threat intelligence, TTPs and IOCs into effective detections
• Tune alerts and significantly reduce false positives
• Onboard, parse and normalise security logs across enterprise environments
• Support complex incident investigations and threat hunting
• Develop SOAR playbooks, automation and security integrations
• Improve detection coverage, SOC efficiency and security monitoring capabilities
• Work across SIEM, EDR/XDR, IAM, cloud and wider security tooling
• Help develop emerging AI/agentic security use cases

What we're looking for

• Strong hands-on Detection Engineering / SIEM Engineering experience
• Proven experience writing and tuning detection logic
• Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain
• Experience reducing false positives and improving alert fidelity
• Excellent critical thinking and problem-solving skills
• Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar
• Knowledge of SOAR, automation, log pipelines and API integrations
• Strong communication skills and the ability to explain complex security concepts clearly

AI experience is beneficial but not essential - strong detection engineering is the priority.

Experience within automotive or manufacturing is advantageous but not required.

If you're a hands-on L3 security engineer who enjoys building better detections rather than simply responding to alerts, we'd like to hear from you.