Security Information & Event Monitoring (SIEM) Engineer

Summary: The Security Information & Event Monitoring (SIEM) Engineer is responsible for maintaining the SIEM platform, including onboarding log sources, creating custom parsers, and developing analytic rules. The role requires collaboration with the Threat Detection & Response team and involves guiding the SIEM Engineering team. The position is hybrid, requiring at least two days in the office, and is open only to active SC holders.

Key Responsibilities:

• Develop the security monitoring platform, ensuring optimal performance, scalability, and integration with security tools.
• Participate in infrastructure projects to develop, plan, and implement solutions for security monitoring.
• Design, implement, and maintain detection rulesets. Scope, plan, and track log integrations.
• Guide, develop, and grow the SIEM Engineering team.
• Collaborate with the wider Threat Detection & Response team to ensure the SIEM platform meets their day-to-day needs and support incidents as necessary.

Key Skills:

• Proven hands-on SIEM Engineering background.
• Extensive experience working with security logs across multiple domains – identity and access, network, system, data, application, cloud – and multiple product types.
• Proficiency in data analysis and scripting languages (e.g., PowerShell, Python).
• Strong Security Orchestration, Automation and Response (SOAR) knowledge.
• Team leadership experience with great collaboration and stakeholder management skills.

Salary (Rate): undetermined

City: Havant

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT