Ofertas › DCV Technologies
DCV Technologies · Royal Leamington Spa, United Kingdom · £? - ? per year
Salary: £? - ? per year Requirements: Strong hands-on experience in Detection Engineering, Threat Hunting, or Security Operations Practical knowledge of MITRE ATT&CK, attacker TTPs, and behavioural threat detection Experience developing detection logic using KQL, SPL, Sigma, or scripting languages Understanding of SIEM, EDR/XDR, security telemetry, and incident investigation Ability to independently design, test, tune, and maintain detection content Desirable experience with Microsoft Sentinel, Splunk, Elastic, or Google Chronicle Desirable experience with Microsoft Defender, CrowdStrike, or SentinelOne Desirable experience with purple teaming, threat modelling, and Detection-as-Code Responsibilities: Design, develop, and maintain threat detection rules aligned with MITRE ATT&CK Build behavioural analytics and detection use cases using KQL, SPL, Sigma, Python, and PowerShell Develop detection content across endpoint, identity, cloud, network, and email security telemetry Tune, validate, and optimise detections and reduce false positives Translate threat intelligence, incident response findings, and threat hunting insights into actionable detections Support purple teaming, attack simulation, and adversary emulation exercises Identify detection coverage gaps and improve security monitoring capabilities Implement Detection-as-Code, automation, and detection lifecycle management Collaborate with SOC, Threat Intelligence, Incident Response, and Red Team specialists Explore AI-enabled detection hypotheses and automated rule creation Own the end-to-end detection engineering lifecycle, translating threat intelligence, threat hunting findings, and adversary techniques into effective detection rules Technologies: AI Cloud Support Network PowerShell Python Security Splunk More: We are recruiting three experienced Senior SOC Detection Engineers for a six-month contract supporting enterprise cybersecurity operations. This hands-on role focuses on designing, developing, and optimising threat-led detection capabilities across complex environments to identify sophisticated cyber threats, improve security visibility, and support continuous SOC improvement. The role is based in Leamington Spa, Manchester, or Warrington, with a hybrid working pattern of three days onsite and two days remote. We offer competitive market rates. last updated 43 week of 2026