Location: Coventry (Hybrid)
We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection.
What you'll be doing
Design, build and optimise advanced SIEM detection rules and correlation logic
Translate threat intelligence, TTPs and IOCs into effective detections
Tune alerts and significantly reduce false positives
Onboard, parse and normalise security logs across enterprise environments
Support complex incident investigations and threat hunting
Develop SOAR playbooks, automation and security integrations
Improve detection coverage, SOC efficiency and security monitoring capabilities
Work across SIEM, EDR/XDR, IAM, cloud and wider security tooling
Help develop emerging AI/agentic security use cases
What we're looking for
Strong hands-on Detection Engineering / SIEM Engineering experience
Proven experience writing and tuning detection logic
Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain
Experience reducing false positives and improving alert fidelity
Excellent critical thinking and problem-solving skills
Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar
Knowledge of SOAR, automation, log pipelines and API integrations
Strong communication skills and the ability to explain complex security concepts clearlyAI experience is beneficial but not essential - strong detection engineering is the priority.
Experience within automotive or manufacturing is advantageous but not required.
If you're a hands-on L3 security engineer who enjoys building better detections rather than simply responding to alerts, we'd like to hear from you
Salary description
£80000.00 - £100000.00 per year