SOC Detection Engineer in Warrington

SOC Detection Engineer
Location: Leamington Spa, Manchester or Warrington
Contract: 6 months
Working Pattern: Hybrid - 3 days in the office, 2 days remotely
I'm recruiting for a SOC Detection Engineer to strengthen threat detection capabilities across a large enterprise environment.
This is an opportunity to work on threat-led detection engineering, focusing on identifying sophisticated attacker behaviours and improving the effectiveness of security operations.
You'll translate threat intelligence, threat hunting findings, red team exercises and incident investigations into accurate detection logic. The focus is on engineering and improving detections rather than day-to-day SIEM administration or security tooling support.
Key Skills:
Threat-led detection engineering and behavioural analytics
MITRE ATT&CK mapping and adversary TTP analysis
Threat intelligence, modelling and hunting
Detection development using KQL, SPL or Sigma
Python and PowerShell automation
Security telemetry across endpoint, identity, cloud and network environments
Detection tuning, validation and false-positive reduction
Detection-as-Code and version control
Attack simulation, purple teaming and adversary emulation
Experience with SIEM platforms such as Microsoft Sentinel, Splunk or Elastic
This is an excellent opportunity for a detection specialist to make a tangible impact on enterprise cyber defence, developing and validating detections that improve visibility of emerging threats.
For more information or to apply directly, please email I review applications daily and will contact shortlisted candidates as quickly as possible.