‹ All jobs
Senior Security Engineering Consultant
<p>Nomios’ mission is to build a secure and connected future. Organisations across the globe depend on us to help secure and connect their digital infrastructures.</p><p style="min-height: 1.7em;"></p><p>As part of our continued UK growth, we are expanding our Professional Services capability and seeking a Security Engineering Consultant to deliver specialist security engineering and operations consultancy across our customer base.</p><p style="min-height: 1.7em;"></p><p>This is a hands-on technical role within the Security Operations domain, focused on helping customers improve and automate their SOC functions, tooling, and detection capabilities. You will work across a range of technologies and engagements, from SOAR and SIEM implementation through to vulnerability management, exposure management, and process automation.</p><p style="min-height: 1.7em;"></p><p><strong>Your role as Senior Security Engineering Consultant</strong></p><p style="min-height: 1.7em;"></p><p>The Security Engineering Consultant role sits within the Security Operations Team, working directly with the Nomios SOC Engineering team.</p><p style="min-height: 1.7em;"></p><p class="Paragraph SCXW77317274 BCX0">This is a senior, customer-facing Professional Services role within our Security Engineering function, focused on detection engineering and automation. You will lead the design and delivery of detection and response capabilities across SIEM, XDR and SOAR platforms. This includes building detection rules, developing automations, and creating operational playbooks that support effective SOC outcomes.</p><p style="min-height: 1.7em;"></p><p class="Paragraph SCXW77317274 BCX0">A key aspect of the role is ownership of the detection as code approach, ensuring detections and automations are developed, structured and delivered in a consistent and scalable way. Working directly with customers, you will define detection strategies, design use cases aligned to MITRE ATT&CK, and guide improvements in visibility, coverage and response maturity. You will work closely with platform onboarding and engineering teams, supplementing them with specialist expertise in detection engineering and automation, rather than focusing on platform deployment itself. </p><p style="min-height: 1.7em;"></p><p class="Paragraph SCXW77317274 BCX0">The role combines hands-on engineering with advisory responsibilities, with a clear focus on delivering high-quality outcomes and enabling customers to operate and evolve their detection capabilities.</p><p style="min-height: 1.7em;"></p><p><strong>Responsibilities</strong></p><p style="min-height: 1.7em;"></p><p>Key responsibilities of the role include:</p><p style="min-height: 1.7em;"></p><p><strong>Deliver</strong></p><ul><li><p>Design and deliver detection rulesets across SIEM and XDR platforms</p></li><li><p>Develop and tune detection logic using KQL or equivalent query languages</p></li><li><p>Design detection use cases aligned to MITRE ATT&CK and real-world attack techniques</p></li><li><p>Map customer log sources to detection use cases to assess coverage and identify gaps</p></li><li><p>Design and implement SOAR automations, integrations and response workflows</p></li><li><p>Develop and document customer incident response playbooks aligned to detection outputs</p></li><li><p>Translate threat intelligence and operational learnings into