At a Glance
- Tasks: Design and develop advanced detection logic to combat modern cyber threats.
- Company: Join a leading tech firm dedicated to national security and defence.
- Benefits: Enjoy 25 days annual leave, health cash plan, life assurance, and pension.
- Other info: Hybrid working model with opportunities for professional development.
- Why this job: Make a real impact in cyber defence while advancing your career.
- Qualifications: Deep SIEM expertise and strong analytical skills required.
The predicted salary is between 65000 - 65000 € per year.
Are you a Detection Engineer ready to take on the fight against modern adversaries? Join a well-established SOC working with high-profile Defence clients, where your expertise genuinely matters.
In this hands-on technical role, you’ll own the end-to-end design, development and maturity of detection logic across SIEM platforms—engineering effective responses to real-world attacker techniques. You’ll operate with a high degree of autonomy, acting as a trusted SME across multiple secure environments within a complex MSSP setting.
This is a standout opportunity to advance your career at the sharp end of cyber defence.
Location: Hybrid working – 2 days per week in our Farnborough office.
Security: You must hold or be eligible for SC Clearance.
What you'll be doing:
- Design, build, test and continuously refine advanced SIEM detection logic, including rules, correlations and analytics.
- Research emerging threats, vulnerabilities and adversary TTPs, mapping them to MITRE ATT&CK to close detection and visibility gaps.
- Tune and validate detections to minimise false positives and deliver high-fidelity alerts for SOC analysts.
- Act as a technical authority, providing expert guidance to SOC Analysts, Architects and Engineers to strengthen overall detection capability.
- Define, implement and maintain technical detection standards across environments.
- Clearly communicate complex technical risks and detection logic to both technical teams and non-technical stakeholders.
What you’ll bring:
- Deep SIEM expertise, building advanced detection logic, automation and complex queries in Splunk (SPL) and Microsoft Sentinel (KQL).
- A proven track record delivering complex detection engineering projects within enterprise or MSSP environments.
- Strong analytical skills, with the ability to break down sophisticated attacks into actionable detection patterns.
- Confidence to own technical delivery end-to-end, driving work through to completion with minimal escalation.
- Expert knowledge of MITRE ATT&CK, with real-world application in detection engineering.
- A BSc in Computer Science, IT, or a related discipline.
- Solid scripting skills in Python, PowerShell, or similar, supporting automation and data manipulation.
- Experience developing detections in QRadar and/or conducting EDR-focused threat hunting (e.g. CrowdStrike, Microsoft Defender for Endpoint).
- Broad infrastructure awareness across Cloud (Azure/AWS), on-prem, and SaaS / PaaS / IaaS environments.
If you are interested in this role but not sure if your skills and experience are exactly what we’re looking for, please do apply, we’d love to hear from you!
Employment Type: Full-time, Permanent.
Location: Hybrid: 2 days per week in Farnborough.
Security Clearance Level: SC Cleared or eligible.
Salary: To £65,000.
Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance and pension.
Sopra Steria: Our Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client’s goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK’s most complex safety- and security-critical markets.
Locations
Senior Engineer - Analysis in Farnborough, Hampshire employer: Sopra Steria
Sopra Steria is an exceptional employer, offering a dynamic work culture that prioritises professional development and collaboration. With a focus on meaningful contributions to national security, employees enjoy a supportive environment where their expertise is valued, alongside competitive benefits such as 25 days of annual leave and a health cash plan. The hybrid working model in Farnborough allows for flexibility while engaging in cutting-edge cyber defence projects, making it an ideal place for those looking to advance their careers in a high-impact field.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Engineer - Analysis in Farnborough, Hampshire
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, especially those already working in SOCs or similar roles. Attend meetups or webinars, and don’t be shy about asking for informational interviews – you never know who might have a lead on your dream job!
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your detection logic projects or any relevant work you've done. This is your chance to demonstrate your expertise in SIEM platforms and how you tackle real-world threats – make it shine!
✨Tip Number 3
Prepare for the interview like it’s a mission! Research the company and its clients, brush up on MITRE ATT&CK, and be ready to discuss your experience with Splunk and Microsoft Sentinel. Confidence is key, so practice articulating your thought process clearly.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets seen by the right people. Plus, if you’re unsure about your fit, just go for it – we love hearing from passionate candidates like you!
We think you need these skills to ace Senior Engineer - Analysis in Farnborough, Hampshire
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Senior Engineer - Analysis role. Highlight your SIEM expertise and any relevant projects you've worked on. We want to see how your experience aligns with what we’re looking for!
Showcase Your Skills:Don’t just list your skills—show us how you’ve applied them in real-world scenarios. Whether it’s building detection logic or automating processes, give us examples that demonstrate your capabilities.
Be Clear and Concise:When writing your application, keep it clear and to the point. We appreciate straightforward communication, especially when it comes to complex technical topics. Make it easy for us to see your value!
Apply Through Our Website:We encourage you to apply through our website for a smoother process. It helps us keep track of your application and ensures you don’t miss out on any important updates from us!
How to prepare for a job interview at Sopra Steria
✨Know Your SIEM Inside Out
Make sure you’re well-versed in the specifics of SIEM platforms like Splunk and Microsoft Sentinel. Brush up on your knowledge of building advanced detection logic, as you’ll likely be asked to discuss your experience with complex queries and automation during the interview.
✨Familiarise Yourself with MITRE ATT&CK
Since the role involves mapping adversary techniques to MITRE ATT&CK, it’s crucial to understand this framework thoroughly. Be prepared to explain how you've applied it in real-world scenarios to close detection gaps and improve visibility.
✨Showcase Your Analytical Skills
Be ready to demonstrate your ability to break down sophisticated attacks into actionable detection patterns. You might be given hypothetical scenarios, so practice articulating your thought process and how you would approach these challenges.
✨Communicate Clearly with Technical and Non-Technical Audiences
You’ll need to convey complex technical risks and detection logic to various stakeholders. Practice explaining your work in simple terms, as this will show your ability to bridge the gap between technical teams and non-technical staff.
