SOC Detection Engineer

SOC Detection Engineer

Location: Leamington Spa, Manchester or Warrington
Contract: 6 months
Working Pattern: Hybrid - 3 days in the office, 2 days remotely

I'm recruiting for a SOC Detection Engineer to strengthen threat detection capabilities across a large enterprise environment.

This is an opportunity to work on threat-led detection engineering, focusing on identifying sophisticated attacker behaviours and improving the effectiveness of security operations.

You'll translate threat intelligence, threat hunting findings, red team exercises and incident investigations into accurate detection logic. The focus is on engineering and improving detections rather than day-to-day SIEM administration or security tooling support.

Key Skills:

• Threat-led detection engineering and behavioural analytics


• MITRE ATT&CK mapping and adversary TTP analysis


• Threat intelligence, modelling and hunting


• Detection development using KQL, SPL or Sigma


• Python and PowerShell automation


• Security telemetry across endpoint, identity, cloud and network environments


• Detection tuning, validation and false-positive reduction


• Detection-as-Code and version control


• Attack simulation, purple teaming and adversary emulation


• Experience with SIEM platforms such as Microsoft Sentinel, Splunk or Elastic

This is an excellent opportunity for a detection specialist to make a tangible impact on enterprise cyber defence, developing and validating detections that improve visibility of emerging threats.