SIEM Contract Jobs in London
Updating results…
20 Contract jobs sorted by:
Date Posted
Date Posted
Rate
Updating results…
20 Contract jobs
Stay Updated on Contract Jobs
Never miss another opportunity with our email alerts.
Save your searches to be notified as soon as new jobs are added.
Sort By
Saved Searches
No saved searches yet
Filters
IR35 Status
Working Arrangements
Industry
Sector
Country
Seniority Level
Posted By
Contract Rate
Date Posted
IR35 Status
Working Arrangements
Industry
Sector
Posted By
Country
Seniority Level
Date Posted
Contract Rate
£
—
£
About Our SIEM Contract Roles in London
What does a siem contractor do?
As a contract SIEM, you are hired to implement, configure, optimise, and operate SIEM platforms that collect, correlate, and analyse security log and event data from across an organisation's technology estate to detect threats, investigate incidents, and support compliance reporting. SIEM is a foundational component of a security operations centre, providing the visibility and detection capability that enables security analysts to identify potential security incidents from the enormous volume of security events generated by modern enterprise environments. Contractors are brought in to implement a new SIEM platform, to migrate from one SIEM to another, to build and tune detection rules that improve the signal-to-noise ratio of SIEM alerts, to develop SIEM content for specific threat use cases, or to provide specialist SIEM expertise within a security operations team.
SIEM contractors are expected to have deep, hands-on experience with the specific SIEM platform relevant to the engagement. Microsoft Sentinel is the most commonly specified SIEM platform in UK enterprise environments, and experience creating Sentinel analytics rules using KQL (Kusto Query Language), building SOAR playbooks in Logic Apps, managing Sentinel workspaces and data connectors, and optimising ingestion costs is a common requirement. Splunk contractors need proficiency in SPL (Splunk Processing Language) for search and analytics alongside knowledge of Splunk Enterprise Security for SIEM use cases and SOAR for automation. IBM QRadar, Elastic SIEM, and LogRhythm are among the other platforms that generate regular UK contract demand. The ability to develop detection rules that accurately identify threat behaviours while minimising false positives, to perform log source onboarding and normalisation, and to conduct SIEM health checks that ensure coverage quality is consistently expected at senior SIEM contractor level.
What is the market like for siem contractors?
The SIEM contract market is a steadily active specialist within the cybersecurity contractor market, driven by the structural need for threat detection and monitoring capability across financial services, critical national infrastructure, healthcare, and large corporate organisations. Microsoft Sentinel has grown rapidly to become the dominant SIEM platform for new implementations in the UK, creating a large and growing Sentinel contractor market with strong demand for KQL-proficient security engineers. The migration of organisations from legacy SIEM platforms to Sentinel or Splunk continues to generate significant project-based SIEM contractor demand. Rates reflect the specialist platform knowledge and security domain expertise required, sitting at the premium end of the security operations contracting market.
What is the contracting market like in London?
London dominates the UK contractor market by volume, depth, and rate levels. The capital concentrates the headquarters and major offices of most FTSE 100 companies, the largest global banks, the Big Four professional services firms, and the central government departments that collectively generate the majority of UK contract demand. Every contracting discipline covered on this site has active demand in London, from niche specialisms like threat intelligence and LLM engineering through to high-volume disciplines like project management and business analysis. The sheer density of employers means contractors in London typically have more choice of engagement at any given time than anywhere else in the UK. Day rates carry a premium of 15 to 25 per cent over the national average across most disciplines, reflecting both the concentration of complex, high-value programmes and the cost of operating in the capital.
How much do siem contractors usually earn in London?
Contract rates for siem roles in London typically range from £550 to £990 per day, depending on the scope of the role, required expertise, and the delivery expectations of the engagement.
How many siem vacancies in London are there on Quality Contracts?
Over the past twelve months, we have tracked over 100 siem contract roles across the site, with London accounting for roughly one in three of those. Data reviewed up to June 2026.