Required skills
- Detection Engineering
- KQL
- SPL
- SQL
- MITRE ATT&CK
- Adversary Tactics and Techniques
- Windows
- AI/LLMs
- Git
- Stakeholder Management
Languages: English
Job description
Project overview
Role Overview
We're looking for an experienced Cyber SOC Detection Engineer to design, build and improve security detections across a large enterprise environment.
This is a hands-on role focused on identifying cyber threats, improving detection accuracy and reducing false positives. You'll work closely with SOC, Incident Response, Threat Intelligence and Security Engineering teams. Working accross AI workflows.
Key Responsibilities
Essential Skills
Desirable Skills
Job Title: Detection And Response Analyst
- Design, build, test and maintain security detections.
- Manage detections through the full lifecycle, from development through tuning and retirement.
- Develop detection rules using KQL, SPL, SQL or similar languages.
- Build detections across endpoint, identity, cloud and network security.
- Map detection coverage against MITRE ATT&CK.
- Identify gaps in security monitoring and improve detection coverage.
- Reduce false positives and improve alert quality.
- Test detections using simulations, log replay and adversary emulation.
- Improve logging, telemetry and data quality.
- Use AI/LLMs and Agentic AI to support SOC detection, triage and response.
- Work closely with SOC analysts, Incident Response and Threat Intelligence teams.
- Maintain clear documentation, runbooks and detection standards.
- Strong SOC/Detection Engineering experience within a large enterprise environment.
- experience building and tuning production security detections.
- Strong knowledge of attacker tactics and techniques.
- Hands-on experience with KQL, SPL, SQL or equivalent.
- Strong understanding of Windows, identity, cloud, endpoint and network telemetry.
- experience managing the full detection lifecycle.
- Understanding of MITRE ATT&CK.
- experience using AI/LLMs or Agentic AI within SOC workflows.
- experience with Git/version control, code reviews and automation.
- Strong communication and stakeholder management skills.
- Purple teaming or adversary emulation.
- SOAR integration and automation.
- Python scripting.
- Data modelling and log normalisation.
- Machine Learning-based anomaly detection.
- Relevant security certifications such as GIAC or cloud security certifications.
Project details
Manchester, UK
Job Type: Contract
Trading as TEKsystems. Allegis Group Limited, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands.
If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at our website.
To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go our website.
We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice on our website for details on how to contact us.
To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.
- Start: 2026-11-12
- Location: Manchester, GB-ENG, UK, GB
- Languages: English
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on JobServe