Senior Security Engineer – Monitoring & Detection

Made Tech

. Take end-to-end ownership of securing systems built for UK public sector organisations .

Posted 10/14/2026full-timeUnited KingdomSenior💰 £55,000 - £85,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud security, particularly with AWS, Azure, or GCP, while effectively managing security operations and detection logic using tools like Splunk, YARA, and Cribl. Capable of translating technical risks into business terms for stakeholders in the UK public sector.

Highest-signal resume keywords

Cloud Security ExperienceAdvanced Splunk (SPL) Detection LogicCribl Log Ingestion ManagementZero Trust Security PrinciplesEligibility for SC Security Clearance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Cloud SecurityDetection Rule TuningData NormalisationReplay TestingSignal-to-Noise TrackingData DeduplicationEncryption TechniquesNetwork SegmentationMITRE ATT&CK MappingAutomation Tooling

Soft Skills

Stakeholder CommunicationTeam CollaborationMentoring

Tools & Technologies

SplunkYARAEDR PlatformsCriblKinesisS3Amazon Security LakeOCSF

Certifications & Qualifications

SC Security Clearance Eligibility

Industry Keywords

UK Public SectorZero TrustIdentity-First SecuritySecrets Management

Tech Stack

Tools & technologies

AWSAzureCloudGoogle Cloud PlatformSplunk

About the role

Key responsibilities & impact

Take end-to-end ownership of securing systems built for UK public sector organisations
Embed security into delivery pipelines
Build tooling and automation to keep government services secure by default
Build and tune detection rules across Splunk (SPL), YARA, and EDR platforms
Map detections to MITRE ATT&CK and track signal-to-noise and false-positive rates
Test detection rules through replay and load testing
Run red-team scenarios for critical rules
Work with L1–L3 analysts to align detections with operational needs
Manage Cribl log ingestion, including routing, filtering, normalisation, and enrichment
Reduce data volume through deduplication, trimming, and NetFlow summarisation
Manage streaming and storage using Kinesis, S3, and Amazon Security Lake
Apply hot/warm/cold data tiering, OCSF normalisation, encryption, and least-privilege access
Translate technical risk into business and policy terms for civil servant stakeholders and system owners
Support junior and mid-level engineers and act as a technical point of contact across teams

Requirements

What you’ll need

Eligibility for SC security clearance
5 years' UK residency
5 years' employment history, or history back to full-time education
Hands-on cloud security experience with AWS, Azure, or GCP
Either advanced Splunk (SPL), YARA, and EDR detection logic experience, or experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation
Strong grasp of Zero Trust, identity-first security, secrets management, and network segmentation
Experience working with or alongside UK Government/public sector stakeholders
Ability to occasionally work outside normal Monday–Friday hours during release/change windows, planned maintenance, or to align with client operating hours

Benefits

Comp & perks

30 days paid annual leave
Flexible working hours
Flexible parental leave options
Part-time remote working
Paid counselling
Financial and legal advice
Smart Tech scheme
Cycle to work scheme
Individual benefits allowance
Health care cash plan option
Pension plan option
Optional social and wellbeing calendar of events
Support and reasonable adjustments during the application process