SIEM Engineering

<p class="text-muted mb-3">Your new company</p>

<p class="text-muted mb-3">You will be working for a known organisation. This role is working remotely with the occasional travel into the London office. The rate is £600 per day inside scope of IR35 and it's a 6-month contract.</p>

<p class="text-muted mb-3">Your new role</p>

<p class="text-muted mb-3">We are seeking a senior security engineer with strong hands-on Splunk and QRadar experience to support a client engagement for an initial six-month period. The role combines Splunk implementation, engineering and administration with operational monitoring, SOC support, incident management and security use case development.</p>

<h5 class="fw-bold text-success mt-4 mb-3">Key Responsibilities</h5>

<p class="text-muted mb-3">Support the implementation, configuration and ongoing operation of Spunk.</p>

<p class="text-muted mb-3">Provide Splunk administration, engineering, operational monitoring and platform support.</p>

<p class="text-muted mb-3">Work with both Splunk and QRadar within the client security environment.</p>

<p class="text-muted mb-3">Support SOC operations and incident management activities.</p>

<p class="text-muted mb-3">Develop security use cases and tune existing content to improve operational effectiveness.</p>

<p class="text-muted mb-3">Repoint log flows from Fluent Bit into Splunk.</p>

<p class="text-muted mb-3">Support API integrations into Expel.</p>

<p class="text-muted mb-3">Troubleshoot SIEM, logging and integration issues as part of the wider security engineering function.Essential Skills & Experience</p>

<p class="text-muted mb-3">Strong hands-on Splunk implementation and engineering experience.</p>

<p class="text-muted mb-3">Splunk administration, operations and monitoring experience.</p>

<p class="text-muted mb-3">Hands-on IBM QRadar experience.</p>

<p class="text-muted mb-3">Experience supporting SOC environments and security incident management.</p>

<p class="text-muted mb-3">Experience developing and tuning SIEM security use cases / detection content.</p>

<p class="text-muted mb-3">Experience with log ingestion, log routing or SIEM data onboarding.</p>

<p class="text-muted mb-3">Ability to work at a senior technical level across implementation and BAU operational support.Desirable Skills</p>

<p class="text-muted mb-3">Experience with Fluent Bit, particularly routing logs into Splunk.</p>

<p class="text-muted mb-3">API integration experience, ideally involving Expel.</p>

<p class="text-muted mb-3">Python scripting experience.</p>

<p class="text-muted mb-3">What you'll need to succeed</p>

<p class="text-muted mb-3">The requirement is strongly hands-on and combines SIEM engineering with operational security support.</p>

<p class="text-muted mb-3">What you need to do now</p>

<p class="text-muted mb-3">If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.</p>

<p class="text-muted mb-3">If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career.</p>

<p class="text-muted mb-3">Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)</p>