SOC Engineer

Job description

Salary: £80,000 - £100,000
Location: Coventry (Hybrid)

We're looking for a Senior SOC L3 Detection Engineer to strengthen an enterprise security operation, with a strong focus on detection engineering, SIEM and threat detection.

What you'll be doing

• Design, build and optimise advanced SIEM detection rules and correlation logic
• Translate threat intelligence, TTPs and IOCs into effective detections
• Tune alerts and significantly reduce false positives
• Onboard, parse and normalise security logs across enterprise environments
• Support complex incident investigations and threat hunting
• Develop SOAR playbooks, automation and security integrations
• Improve detection coverage, SOC efficiency and security monitoring capabilities
• Work across SIEM, EDR/XDR, IAM, cloud and wider security tooling
• Help develop emerging AI/agentic security use cases

What we're looking for

• Strong hands-on Detection Engineering / SIEM Engineering experience
• Proven experience writing and tuning detection logic
• Strong understanding of MITRE ATT&CK, attacker TTPs and the cyber kill chain
• Experience reducing false positives and improving alert fidelity
• Excellent critical thinking and problem-solving skills
• Experience with Microsoft Sentinel, CrowdStrike NG SIEM or similar
• Knowledge of SOAR, automation, log pipelines and API integrations
• Strong communication skills and the ability to explain complex security concepts clearly

AI experience is beneficial but not essential - strong detection engineering is the priority.

Experience within automotive or manufacturing is advantageous but not required.

If you're a hands-on L3 security engineer who enjoys building better detections rather than simply responding to alerts, we'd like to hear from you.

Reference 225655831