Job Description
Senior Detection Engineer (Consultancy) — Remote (Southern England)
/n
Location: Home-based across the South — client site roughly once a fortnight Salary: £70,000 + £5,000 car allowance + £15,000 bonus (£90,000 total package)
/n
Detection engineering, done properly
/n
This isn't a deployment role and it isn't a monitoring role. You'll spend your time on the thing most detection engineers never get enough of: designing, writing and tuning the detection logic itself.
/n
You'll work across customer environments as part of an established Professional Services team, alongside the SOC Engineering function. Because this is a managed security service provider, you'll see more estates, more log sources and more genuinely different problems in a year than most in-house roles offer in five.
/n
The split is roughly 80/20 — the large majority of your week is hands-on detection and automation work, with the remainder client-facing: workshops, coverage assessments and walking customers through what you've built.
/n
Home-based, with client site visits roughly every couple of weeks. No on-call rota. No clearance requirement.
/n
What you'll be doing
/n
/n
- Designing and building detection rulesets across SIEM and XDR platforms
/n
- Writing and tuning detection logic in KQL, cutting false positives without losing coverage
/n
- Mapping customer log sources against use cases to identify and close coverage gaps
/n
- Designing use cases aligned to MITRE ATT&CK
/n
- Building SOAR automations and automated response workflows
/n
- Writing incident response playbooks for customers
/n
- Owning the detection-as-code approach — pipelines, version control, deployment
/n
- Running workshops, coverage assessments and use case catalogues as customer deliverables
/n
/n
What we're looking for
/n
/n
- Hands-on SIEM engineering experience, ideally Microsoft Sentinel
/n
- Confident KQL — this is the core of the role
/n
- SOAR playbook design in Azure Logic Apps, Cortex XSOAR or similar
/n
- Scripting in Python or PowerShell, and comfort working with APIs
/n
- Use case design against MITRE ATT&CK
/n
- Working knowledge of XDR/EDR platforms and Azure telemetry sources
/n
- Some exposure to NDR tooling such as Vectra AI or Corelight is a bonus
/n
/n
Consultancy or customer-facing experience is valuable, but if you've built strong detection engineering skills in an in-house SOC and want to move into a client-facing role, we'd still like to hear from you.
/n
What's on offer
/n
/n
- £70,000 base, £5,000 car allowance and a £15,000 bonus
/n
- Home-based across Southern England, with client visits around once a fortnight
/n
- No on-call, no shift rota
/n
- No security clearance required
/n
- Roughly 80% hands-on engineering, 20% client-facing
/n
- Technical ownership of the detection-as-code practice
/n
- Certification and training support with a clear progression path
/n
- Exposure to enterprise security estates across multiple industries
/n
/n
How to apply
/n
Apply through Reed with an up-to-date CV, or get in touch for a confidential conversation.
/n
Fazer Recruitment is acting as an employment agency in relation to this vacancy.
Senior Detection Engineer (Consultancy) in Reading employer: Fazer Recruitment
Fazer Recruitment offers an exceptional work environment for Full Stack Engineers, particularly those passionate about sports technology. With a focus on ownership and innovation, employees benefit from direct access to leadership, fostering a culture of collaboration and influence on product development. The remote nature of the role allows for flexibility, while opportunities for professional growth and involvement in cutting-edge AI-assisted projects make this an attractive position for tech enthusiasts.
