Senior Security Engineering Consultant

Infosec • Permanent • Remote (Basingstoke, Hampshire, England, United Kingdom) • £70k - £80k / year • 3h ago

Our client, a leader in the cyber security sector, is currently seeking a Senior Security Engineering Consultant to join their team. This permanent role is a hands-on technical position within the Security Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities.

Key Responsibilities:

Design and deliver detection rulesets across SIEM and XDR platforms
Develop and tune detection logic using KQL or equivalent query languages
Design detection use cases aligned to MITRE ATT&CK and real-world attack techniques
Map customer log sources to detection use cases to assess coverage and identify gaps
Design and implement SOAR automations, integrations and response workflows
Develop and document customer incident response playbooks aligned to detection outputs
Translate threat intelligence and operational learnings into improved detections and automations
Deliver detection as code pipelines, including structured use case development and versioning approaches
Produce clear technical and customer-facing deliverables, including detection strategies, use case catalogues and coverage assessments
Work directly with customers as a trusted technical consultant
Lead workshops covering detection engineering, use case design and SOC maturity
Guide customers on improving detection coverage and aligning to MITRE ATT&CK
Clearly explain detection strategies, gaps and recommendations to both technical and non-technical stakeholders
Work closely with platform onboarding and engineering teams to ensure smooth integration of delivered detections and automations
Support SOC teams by ensuring delivered outputs are practical, usable and aligned to operational workflows
Contribute to the continuous evolution of detection use cases, playbooks and automation patterns
Support development of reusable detection content and delivery standards
Contribute to lab work, testing and validation of detection approaches
Identify gaps in telemetry, logging and enrichment, and provide recommendations to strengthen detection outcomes

Job Requirements:

Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred
Experience writing detection logic using KQL or similar query languages
Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similar
Scripting and automation capability using Python, PowerShell or similar, including working with APIs
Experience designing detection use cases aligned to MITRE ATT&CK
Strong understanding of detection coverage and how log sources map to the attack lifecycle
Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex
Understanding of cloud environments, particularly Azure, and associated security telemetry
Experience working in customer-facing or consultancy roles
Strong communication skills, with the ability to explain technical concepts clearly

Technical Competencies:

SIEM and XDR platforms, including Microsoft Sentinel, Microsoft Defender, Palo Alto XSIAM or XDR, CrowdStrike and SentinelOne
SOAR development, including automation and playbook design using platforms such as Palo Alto XSOAR or similar
Scripting and integration using Python, PowerShell or similar, including API-driven automation
Detection engineering aligned to MITRE ATT&CK, including use case design, ruleset development and coverage assessment
Log source mapping and normalisation to support detection use cases
Network Detection and Response technologies such as Vectra AI, Corelight or similar
Cloud security and telemetry, particularly within Azure environments
Threat intelligence integration and enrichment to support detection and response
Development of customer playbooks and response workflows aligned to SOC operations
General awareness of emerging technologies, including AI-driven security tooling and their application within detection and response

Job Specifics:

Location: This is a hybrid role, primarily remote but with a requirement of ad-hoc travel to customer sites and attend the Basingstoke office as required to support delivery, workshops and engagements.
Hours: Full-time, Monday - Friday, 9:00am - 5:30pm. There is no on-call requirement for this position.

Benefits:

Salary up to £80,000
Performance-based bonuses
Industry-leading benefits
A collaborative engineering environment
Exposure to real-world threats and modern detection approaches
Opportunity to shape Security Operations capabilities

If you are a skilled Security Engineering Consultant looking to join a dynamic and impactful team, we encourage you to apply now and be a part of building a secure and connected future with our client.

You may also be interested in these jobs

Sales Support Administrator

Huntress - Bracknell • Temporary • Remote (Reading, Reading, England, United Kingdom) • £15.54 / hour • 3h ago

Customer Services Work From Home

Job Title: Sales Support Administrator Start Date : 28th September 2026 End Date: 29th January 2027 Hourly rate: £15.54 per hour Working Days and Hours: Monday - Friday, between 8.30am to 5.30pm, totalling 37 hours each...

3h ago

Apply

Area Sales Manager

BMS Performance • Permanent • Remote (Reading, Reading, England, United Kingdom) • £35k - £55k / year • 1d ago

Customer Services Work From Home

Area Sales Manager - Power Generation, South Field-based role covering the South of England, including London Join a global leader in generators, power generation and material handling equipment Genuine progression withi...

1d ago

Apply

Technical Sales Manager - Embedded

Headliners Recruitment • Permanent • Remote (Woking, Surrey, England, United Kingdom) • £75k - £85k / year • 1d ago

Customer Services Work From Home

Technical Sales Manager - Embedded - Perm -UK Remote - Up to £85K plus bonus (20%) and car allowance + great benefits Are you a results driven sales professional with a strong technical background? We’re looking for an...

1d ago

Apply

Internal Sales Executive

Headliners Recruitment • Permanent • Remote (Wokingham, Wokingham, England, United Kingdom) • £28k - £30k / year • 1d ago

Customer Services Work From Home

Internal Sales Executive – Wokingham (hybrid) – Perm - £30K plus 10% bonus We are looking for a dynamic Internal Sales Executive to join our clients team in Wokingham. They are International leaders custom technology sol...

1d ago

Apply

Technical Salesperson (Smart Home Technology)

Ernest Gordon Recruitment Limited • Permanent • Remote (Reading, Reading, England, United Kingdom) • £40k - £46k / year • 1d ago

Customer Services Work From Home

Technical Salesperson (Smart Home Technology) Theale £40,000 + £6,000 Commission Per Year + Training + Paid International Travel + Progression Are you a Technical Salesperson that is interested in working in a global bus...

1d ago

Apply

You may also be interested in these jobs

Sales Support Administrator

Area Sales Manager

Technical Sales Manager - Embedded

Internal Sales Executive

Technical Salesperson (Smart Home Technology)

HIREDONLINE

JOB SEEKERS

RECRUITERS

TOP SEARCHES