SIEM Security Engineer

Your new role

We are looking for an experienced SIEM Security Engineer to join a major long-term security programme, supporting the continued development and maturity of an established SIEM platform.

This is not a greenfield implementation. You'll focus on expanding data ingestion, developing detection use cases, improving monitoring and optimising the existing SIEM capability.

Key Responsibilities

• Onboard and normalise new security log/data sources
• Develop SIEM detection rules, alerts and use cases
• Configure data ingestion using Elasticsearch and Kafka
• Optimise Elasticsearch queries and SIEM performance
• Support automation and deployment through DevOps practices
• Work closely with Security Operations and Engineering teams

You will need experience in the following

• Strong hands-on SIEM engineering experience
• Elasticsearch, Logstash and Kibana (ELK)
• Log ingestion, onboarding and normalisation
• SIEM detection engineering
• Kafka
• Git / GitLab and DevOps experience
• Knowledge of Kubernetes, Ansible, YAML, Helm or ArgoCD
• Linux and networking knowledge

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.