Senior Security Engineering Consultant

Senior Security Engineering Consultant – SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 – Hampshire (hybrid)

We are partnered with a fast-paced fast growing MSSP and they have a key requirement. You will lead the design and delivery of detection and response capabilities across SIEM, XDR, and SOAR. In this senior, customer-facing Professional Services role, you'll build detection rules, develop automations, and create playbooks that SOC teams can put to work.

You will own the detection-as-code approach, making detections and automations consistent, scalable, and repeatable. Work directly with customers to define detection strategies, design MITRE ATT&CK-aligned use cases, and close gaps in visibility, coverage, and response maturity. Partner with onboarding and engineering teams as the detection and automation specialist—not the platform deployment lead.

This is a hybrid role, you will be mainly remote, however clients visits and occasional visits to the Hampshire office for specific team and business reasons will be expected.

Key Skills

• Hands-on SIEM detection engineering and KQL or similar query languages; Microsoft Sentinel preferred.




• SOAR automation and playbook delivery using Logic Apps, Cortex XSOAR, or similar.




• Python, PowerShell, or similar scripting, plus API-driven automation and integration.




• MITRE ATT&CK-aligned use case design, coverage assessment, and log-source mapping to the attack lifecycle.




• XDR/EDR experience: Microsoft Defender, CrowdStrike, Cortex, or SentinelOne; hands-on NDR knowledge, such as Vectra AI or Corelight.




• Cloud security telemetry, particularly Azure; threat intelligence integration and awareness of AI-driven SOC tools.




• Customer-facing consultancy skills and clear technical communication.

Duties & Responsibilities

• Build and tune SIEM/XDR detections using KQL or equivalent languages, aligned to MITRE ATT&CK and real-world threats.




• Map and normalise log sources, assess coverage, and close telemetry, logging, and enrichment gaps.




• Build SOAR automations, integrations, response workflows, and documented incident playbooks for SOC teams.




• Turn threat intelligence and operational lessons into stronger detections and automations.




• Own detection-as-code pipelines, structured use case development, and versioning.




• Advise customers, lead workshops, and deliver clear detection strategies, use case catalogues, and recommendations for all stakeholders.




• Partner with onboarding, engineering, and SOC teams to integrate practical, operationally aligned content.




• Evolve reusable content, delivery standards, and automation patterns through lab testing and validation.

Senior Security Engineering Consultant – SOC, SIEM, XDR, SOAR, KQL, Microsoft - £70,000 - £80,000 – Surrey (hybrid)

#J-18808-Ljbffr