> Markdown version of [/jobs/ext/2930611-senior-cyber-security-engineer](https://www.wearedevelopers.com/jobs/ext/2930611-senior-cyber-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Cyber Security Engineer - **Company:** Sanderson Recruitment Plc - **Location:** Bury, UK - **Experience:** Expert - **Salary:** £85,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Amazon S3, Microsoft Azure, Cloud Computing, Cyber Security, Data Deduplication, Data Reduction, Intrusion Detection and Prevention, Key Management, Network Segmentation, Zero Trust Network Access, Security Information and Event Management, Cloud Platform System, Facebook Flow, Mitre Att&ck, Splunk, Data Pipelines - **Published:** September 16, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5884535727 ## About the Role * Strong hands-on experience within Security Operations, Detection Engineering, Threat Detection, or Security Monitoring. * Experience securing cloud environments across AWS, Azure, or GCP. * Expertise in one or more of the following: Splunk and SPL, YARA rule development, EDR detection engineering, or SIEM content development and tuning. * Experience mapping detections to the MITRE ATT&CK framework. * Strong understanding of modern security principles including Zero Trust, identity-first security, secrets management, and network segmentation. * Experience with Cribl and security data pipeline management is desirable. * Knowledge of Kinesis, Amazon S3, Amazon Security Lake, or similar technologies is desirable. * Understanding of OCSF and security data normalisation is desirable. * Experience working within government, defence, highly regulated industries, or the wider public sector is desirable. * Experience mentoring or leading engineers within a SOC or cyber security function is desirable. ## Description * Develop, tune, and maintain detection rules across SIEM, EDR, and threat detection platforms. * Create and optimise detection logic using technologies such as Splunk and endpoint security solutions. * Map detections against the MITRE ATT&CK framework to ensure comprehensive threat coverage. * Continuously improve detection quality by analysing alert fidelity, false positives, and operational effectiveness. * Validate detections through testing, simulation exercises, and red-team scenarios. * Manage and optimise log ingestion pipelines to ensure high-quality, actionable security data. * Configure routing, filtering, enrichment, and normalisation of security telemetry. * Improve data efficiency through deduplication, data reduction, and flow summarisation techniques. * Support cloud-native data streaming and storage solutions. * Ensure security data aligns with industry standards such as OCSF while maintaining strong encryption and access controls. * Translate complex technical risks into clear business-focused recommendations. * Collaborate with technical and non-technical stakeholders to improve security outcomes. * Act as a trusted technical advisor across engineering and security teams. * Mentor junior engineers and contribute to the growth of the wider cyber security function. Technologies: * AWS * Azure * Cloud * Flow * GCP * Support * Network * Security * Splunk, We are hiring a Senior Security Engineer - Monitoring & Detection for a hybrid role based in Bristol, London, Manchester, or Swansea, with a salary of £55,000 to £85,000 plus benefits. This is a hands-on engineering position supporting large-scale cloud-based environments that help protect critical public sector and government services. You will work alongside SOC analysts, engineers, architects, and stakeholders to strengthen security monitoring, improve resilience, and enable faster, risk-based decision-making. We are committed to respect, equality, diversity, and inclusion, and we welcome applications from people of all backgrounds and perspectives. If you need any help or adjustments during the recruitment process, we encourage you to let us know when you apply. ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [WeAreDevelopers LIVE - CSS is DOOMed](https://www.wearedevelopers.com/videos/1838-wearedevelopers-live-css-is-doomed) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see) - [Hate organising your photos? Try it with 5 Terabytes](https://www.wearedevelopers.com/videos/79-hate-organising-your-photos-try-it-with-5-terabytes) - [Building Systems that Last](https://www.wearedevelopers.com/videos/1389-building-systems-that-last) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)