Detection Engineer

Detection Engineer | Cyber Security

Farnborough (Hybrid – 2 days onsite)
Up to £65,000 + Excellent Benefits
SC Clearance (or eligibility required)

Ready to engineer the frontline of cyber defence?

We’re working with a highly respected cyber security operation supporting critical defence environments, seeking a Detection Engineer to strengthen and evolve advanced threat detection capability across secure enterprise environments.

This is a hands-on technical role where you’ll design, build and optimise detection logic across SIEM platforms, working directly against real-world attacker techniques in a mature, high-performing SOC.

You’ll have the autonomy to shape detection strategy, influence capability development, and act as a technical SME within a complex MSSP environment.

What you’ll be doing:
• Engineering and refining advanced SIEM detections across secure environments
• Researching emerging threats and mapping detections to MITRE ATT&CK
• Tuning detections to improve fidelity and reduce false positives
• Supporting SOC analysts and wider engineering teams with technical expertise
• Driving detection maturity and technical standards

What we’re looking for:
✔ Strong Splunk (SPL) and/or Microsoft Sentinel (KQL) experience
✔ Detection engineering experience within enterprise or MSSP environments
✔ Solid understanding of attacker TTPs and threat detection methodologies
✔ Scripting ability (Python / PowerShell)
✔ Knowledge of cloud and enterprise infrastructure
✔ SC Cleared or eligible

Desirable: QRadar, EDR threat hunting, CrowdStrike, Defender for Endpoint.

Why this role
You’ll join a collaborative cyber team working on genuinely meaningful defence-focused projects, with strong progression, ongoing development, and the opportunity to make a measurable impact.

Interested? Apply now or reach out for a confidential conversation