Security Engineer

<p class="text-muted mb-3">Security Engineer – SIEM / QRadar – 6-month contract – London/remote</p>

<p class="text-muted mb-3">Overview</p>

<p class="text-muted mb-3">My Client is seeking a hands-on Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future migration to Splunk.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities of the Security Engineer</h5>

<p class="text-muted mb-3">Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts.</p>

<p class="text-muted mb-3">Review and optimise detection use cases to improve threat visibility and reduce false positives.</p>

<p class="text-muted mb-3">Configure and maintain log collection, parsing, normalisation and aggregation.</p>

<p class="text-muted mb-3">Support log aggregation using Fluentd, Cribl or similar technologies.</p>

<p class="text-muted mb-3">Ensure relevant security logs are accurately ingested and available to the third-party SOC.</p>

<p class="text-muted mb-3">Troubleshoot log ingestion, parsing and SIEM detection issues.</p>

<p class="text-muted mb-3">Identify opportunities to improve SIEM coverage, logging quality and detection capabilities.</p>

<p class="text-muted mb-3">Support planning and potential migration from QRadar to Splunk.</p>

<p class="text-muted mb-3">Essential Skills & Experience from the Security Engineer</p>

<p class="text-muted mb-3">Strong hands-on experience with IBM QRadar SIEM.</p>

<p class="text-muted mb-3">Experience developing, maintaining and tuning SIEM rules and correlation searches.</p>

<p class="text-muted mb-3">Good understanding of security logging, log sources and event normalisation.</p>

<p class="text-muted mb-3">Experience with log aggregation and forwarding technologies.</p>

<p class="text-muted mb-3">Experience working with SOC teams and supporting security monitoring operations.</p>

<p class="text-muted mb-3">Desirable Skills from the Security Engineer</p>

<p class="text-muted mb-3">Experience with Fluentd, Cribl or Fluent Bit.</p>

<p class="text-muted mb-3">Exposure to Splunk SIEM and migration projects.</p>

<p class="text-muted mb-3">Scripting experience using Python, Bash or similar.</p>

<p class="text-muted mb-3">Experience onboarding new log sources and troubleshooting ingestion pipelines.</p>

<p class="text-muted mb-3">The Security Engineer is required 1 day a week onsite in Central London.</p>

<p class="text-muted mb-3">Apply now to speak with VIQU IT in confidence. Or reach out to Connor Smal via the VIQU IT website.</p>

<p class="text-muted mb-3">Do you know someone great? We'll thank you with up to £1,000 if your referral is successful (terms apply)</p>