At a Glance
- Tasks: Design and optimise SOC capabilities, focusing on detection engineering and automation.
- Company: Leading cybersecurity consulting firm with a focus on innovation.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Other info: Fast-paced environment with excellent career advancement potential.
- Why this job: Join a dynamic team to enhance cybersecurity and make a real difference.
- Qualifications: Strong SIEM experience, scripting skills, and customer-facing consultancy expertise.
The predicted salary is between 60000 - 80000 £ per year.
This is a senior, hands-on cybersecurity consulting role focused on helping customers improve and automate their Security Operations Centre (SOC) capabilities. You’ll design, build, and optimise detection and response solutions across SIEM, XDR, and SOAR platforms, with a strong emphasis on detection engineering, automation, and “detection as code.”
Key Responsibilities
- Design and tune detection rules for SIEM/XDR platforms (particularly Microsoft Sentinel)
- Develop SOAR automations, incident response playbooks, and workflow integrations
- Build detections using KQL and scripting languages such as Python or PowerShell
- Create detection use cases mapped to the MITRE ATT&CK framework
- Assess customer logging and telemetry to identify detection coverage gaps
- Implement detection-as-code pipelines and reusable security content
- Lead customer workshops and provide technical consultancy on SOC maturity and detection strategy
- Collaborate with engineering and onboarding teams to integrate detections and automations into customer environments
- Continuously improve detection content, playbooks, and automation standards
Skills & Experience Requirements
- Strong experience with SIEM engineering (Microsoft Sentinel preferred)
- Hands-on knowledge of KQL and detection rule development
- Experience with SOAR platforms (Logic Apps, Cortex XSOAR, or similar)
- Scripting skills in Python and/or PowerShell, including API integration
- Understanding of MITRE ATT&CK and detection engineering best practices
- Experience with XDR/EDR solutions such as Microsoft Defender, CrowdStrike, Cortex, or Sentinel
- Azure security and cloud telemetry knowledge
- Customer-facing consulting experience with excellent communication skills
Senior SOC Engineer in London employer: Franklin Fitch
Franklin Fitch is an excellent employer that values innovation and collaboration, providing a dynamic work environment for Senior Client Services Engineers. With a strong focus on employee growth, we offer ongoing training and development opportunities, ensuring our team members are equipped to tackle the latest challenges in Azure and on-premises environments. Located in a vibrant area, our company promotes a culture of support and teamwork, making it a rewarding place to build a meaningful career.