Senior Security Engineering Consultant

Senior Security Engineering Consultant in Basingstoke (RG21) | Infosec My career My jobs MA My account Search These jobs were popular with other job seekers Senior Identity Engineer Sophos South East 3 days ago Senior Site Reliability Engineer Spectrum IT Recruitment Limited Southampton (SO14), SO14 £60000 - £70000 per annum 3 days ago Cyber Security Architect Identifi Global Resources Ltd Reading (RG1) From £600 to £700 per day Outside IR35 Contract offering CIRCA £650 pe 2 weeks ago DevSecOps & Security Architect ECS London Up to £650 per day + Inside IR35 (Umbrella Company) 1 week ago DevOps Infrastructure Engineer Sterling Bridge Limited Southampton (SO15) From £70,000 to £90,000 per annum (Excellent Benefits) 1 month ago Sr. AI Threat Researcher Sophos South East 3 days ago IAM Engineer (Entra ID) DGH Recruitment City of London (EC1), EC1 £600 - £675 per day 3 weeks ago Senior Platform Software Engineer Oracle Corporation (UK) Ltd South East 5 days ago 123321 - Security Infrastructure Engineer (SOC) Stott & May Professional Search Limited Surrey £600 - £670 per day 1 week ago Software Engineer (Structured Data) Hackajob Ltd London Competitive 3 weeks ago Senior Security Engineering Consultant Infosec Basingstoke (RG21) Permanent Contract; Hybrid Published: 2 weeks ago £70000.00 - £80000 per annum + bonus Apply Save Senior Security Engineering Consultant Infosec Apply Our client, a leader in the cyber security sector, is currently seeking a Senior Security Engineering Consultant to join their team. This permanent role is a hands-on technical position within the Security Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities. Key Responsibilities: Design and deliver detection rulesets across SIEM and XDR platforms Develop and tune detection logic using KQL or equivalent query languages Design detection use cases aligned to MITRE ATT&CK and real-world attack techniques Map customer log sources to detection use cases to assess coverage and identify gaps Design and implement SOAR automations, integrations and response workflows Develop and document customer incident response playbooks aligned to detection outputs Translate threat intelligence and operational learnings into improved detections and automations Deliver detection as code pipelines, including structured use case development and versioning approaches Produce clear technical and customer-facing deliverables, including detection strategies, use case catalogues and coverage assessments Work directly with customers as a trusted technical consultant Lead workshops covering detection engineering, use case design and SOC maturity Guide customers on improving detection coverage and aligning to MITRE ATT&CK Clearly explain detection strategies, gaps and recommendations to both technical and non-technical stakeholders Work closely with platform onboarding and engineering teams to ensure smooth integration of delivered detections and automations Support SOC teams by ensuring delivered outputs are practical, usable and aligned to operational workflows Contribute to the continuous evolution of detection use cases, playbooks and automation patterns Support development of reusable detection content and delivery standards Contribute to lab work, testing and validation of detection approaches Identify gaps in telemetry, logging and enrichment, and provide recommendations to strengthen detection outcomes Job Requirements: Strong hands-on experience with SIEM engineering, including developing and tuning detection rules, with Microsoft Sentinel preferred Experience writing detection logic using KQL or similar query languages Proven experience designing and implementing SOAR automations and playbooks such as Logic Apps, Cortex XSOAR or similar Scripting and automation capability using Python, PowerShell or similar, including working with APIs Experience designing detection use cases aligned to MITRE ATT&CK Strong understanding of detection coverage and how log sources map to the attack lifecycle Experience with XDR or EDR platforms such as Microsoft Defender, CrowdStrike or Cortex Understanding of cloud environments, particularly Azure, and associated security telemetry Experience working in customer-facing or consultancy roles Strong communication skills, with the ability to explain technical concepts clearly Technical Competencies: SIEM and XDR platforms, including Microsoft Sentinel, Microsoft Defender, Palo Alto XSIAM or XDR, CrowdStrike and SentinelOne SOAR development, including automation and playbook design using platforms such as Palo Alto XSOAR or similar Scripting and integration using Python, PowerShell or similar, including API-driven automation Detection engineering aligned to MITRE ATT&CK, including use case design, ruleset development and coverage assessment Log source mapping and normalisation to support detection use cases Network Detection and Response technologies such as Vectra AI, Corelight or similar Cloud security and telemetry, particularly within Azure environments Threat intelligence integration and enrichment to support detection and response Development of customer playbooks and response workflows aligned to SOC operations General awareness of emerging technologies, including AI-driven security tooling and their application within detection and response Job Specifics: Location: This is a hybrid role, primarily remote but with a requirement of ad-hoc travel to customer sites and attend the Basingstoke office as required to support delivery, workshops and engagements. Hours: Full-time, Monday - Friday, 9:00am - 5:30pm. There is no on-call requirement for this position. Benefits: Salary up to £80,000 Performance-based bonuses Industry-leading benefits A collaborative engineering environment Exposure to real-world threats and modern detection approaches Opportunity to shape Security Operations capabilities If you are a skilled Security Engineering Consultant looking to join a dynamic and impactful team, we encourage you to apply now and be a part of building a secure and connected future with our client. Apply Infosec Banking and Financial Services 10 Jobs Similar Senior Security Engineering Consultant Jobs Popular with Other Job Seekers Senior Identity Engineer Sophos South East 3 days ago Senior Site Reliability Engineer Spectrum IT Recruitment Limited Southampton (SO14), SO14 £60000 - £70000 per annum 3 days ago Cyber Security Architect Identifi Global Resources Ltd Reading (RG1) From £600 to £700 per day Outside IR35 Contract offering CIRCA £650 pe 2 weeks ago DevSecOps & Security Architect ECS London Up to £650 per day + Inside IR35 (Umbrella Company) 1 week ago DevOps Infrastructure Engineer Sterling Bridge Limited Southampton (SO15) From £70,000 to £90,000 per annum (Excellent Benefits) 1 month ago Sr. AI Threat Researcher Sophos South East 3 days ago IAM Engineer (Entra ID) DGH Recruitment City of London (EC1), EC1 £600 - £675 per day 3 weeks ago Senior Platform Software Engineer Oracle Corporation (UK) Ltd South East 5 days ago 123321 - Security Infrastructure Engineer (SOC) Stott & May Professional Search Limited Surrey £600 - £670 per day 1 week ago Software Engineer (Structured Data) Hackajob Ltd London Competitive 3 weeks ago Senior Security Engineering Consultant jobs Senior Security Engineering Consultant jobs in Basingstoke IT jobs IT jobs in Basingstoke Security jobs Security jobs in Basingstoke Jobs in Basingstoke Full Time jobs Weekend jobs Retail jobs Night Shift jobs Apprenticeship jobs NHS jobs HGV jobs Immediate Start jobs Warehouse jobs Cleaning jobs No Experience jobs Remote jobs Admin jobs Apprenticeships jobs Administration jobs Tesco jobs Get hired. Find success. Totaljobs About us Careers at Totaljobs Press Partners Privacy policy Terms and conditions Cookies Legal and compliance Accessibility Jobseekers Salary Planner Jobseeker help centre Career advice Recruiters Post job ads Recruiting news Courses Contact us - recruiters Recruit internationally Download App store Play store The Stepstone Group UK Ltd © 2026 We use cookies We use cookies to operate our website, measure how people use our services to help us improve them, enrich usage profiles and personalise the content displayed to you. We also share information about your use of our site with our social media, advertising, and analytics partners, who may combine it with other information, to show you relevant ads on other websites, and to measure the performance of our advertising. Some cookies are essential for the operation of our website. If you would prefer us not to use the non-essential cookies, click “Just necessary”, but please be aware that this may impact your experience of our site and the services we are able to offer. Click “Accept” if you’re happy for us to place these cookies. You can change your mind at any time. Store and / or access information on a device Cookies, device identifiers, or other information can be stored or accessed on your device for the purposes presented to you. Personalised ads and content, ad and content measurement, audience insights and product development Ads and content can be personalised based on a profile. More data can be added to better personalise ads and content. The performance of ads and content can be measured. Insights about audiences who have viewed the ads and content can be extracted. Data can be used to build or improve user experience, systems and software. Display third-party content (social networks, videos) Content from social networks and embedded content from third-party providers can be displayed. Identifiers derived from authentications If an identifier is created based on authentication data, such as contact details associated with online accounts you have set up on websites or apps (e.g. email address, phone number) or customer identifiers (e.g. an identifier provided by your telecommunications provider), then this identifier can be used to recognize you across websites, apps and devices if you are logged in with the same contact details. Just Necessary Accept All Cookie Settings You can also exercise your right to object to data processing based on legitimate interests under “Privacy Policy”. Privacy Policy Cookie policy