Detection Engineer (SOC / SIEM / Splunk)£450 per day | Outside IR35 | 9-Month ContractActive SC Clearance Required | London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This role offers a unique blend of detection engineering and SOC operations, providing the opportunity to develop and optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents, and improving the effectiveness of security monitoring across AWS and Splunk environments. The Role As a Detection Engineer, you will operate at the intersection of security operations, threat detection, and cloud security. You'll work closely with SOC analysts, engineers, and stakeholders to develop high-fidelity detections, reduce false positives, and strengthen overall security visibility. This is an excellent opportunity for someone with Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections leveraging CloudTrail, GuardDuty, IAM activity, and VPC Flow Logs. Tune and enhance detection content to improve alert accuracy and reduce false positives. Develop signatures and detections using Sigma, YARA, and IDS-based rules where appropriate. Map detection coverage against the MITRE ATT
Detection Engineer employer: Sanderson Government & Defence
As a PAM Consultant with our esteemed consulting client, you will thrive in a dynamic work culture that prioritises innovation and collaboration. The company offers robust employee growth opportunities, including continuous training in cutting-edge security practices, while fostering a diverse and inclusive environment that values every individual's contribution. Located in the UK, this role not only provides competitive benefits but also the chance to make a meaningful impact on clients' security postures through your expertise in Privileged Access Management.
Contact Details:
Sanderson Government & Defence Recruitment Team
