SIEM Engineering

Project overview

Your new company

You will be working for a known organisation. This role is working remotely with the occasional travel into the London office. The rate is £600 per day inside scope of IR35 and it's a 6-month contract.

Your new role

We are seeking a senior security engineer with strong hands-on Splunk and QRadar experience to support a client engagement for an initial six-month period. The role combines Splunk implementation, engineering and administration with operational monitoring, SOC support, incident management and security use case development.

Key Responsibilities

Essential Skills & Experience

Desirable Skills

What you'll need to succeed

The requirement is strongly hands-on and combines SIEM engineering with operational security support.

What you need to do now

If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.

.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found on our website.

• Support the implementation, configuration and ongoing operation of Spunk.
• Provide Splunk administration, engineering, operational monitoring and platform support.
• Work with both Splunk and QRadar within the client security environment.
• Support SOC operations and incident management activities.
• Develop security use cases and tune existing content to improve operational effectiveness.
• Repoint log flows from Fluent Bit into Splunk.
• Support API integrations into Expel.
• Troubleshoot SIEM, logging and integration issues as part of the wider security engineering function.
• Strong hands-on Splunk implementation and engineering experience.
• Splunk administration, operations and monitoring experience.
• Hands-on IBM QRadar experience.
• Experience supporting SOC environments and security incident management.
• Experience developing and tuning SIEM security use cases/detection content.
• Experience with log ingestion, log routing or SIEM data onboarding.
• Ability to work at a senior technical level across implementation and BAU operational support.
• Experience with Fluent Bit, particularly routing logs into Splunk.
• API integration experience, ideally involving Expel.
• Python Scripting experience.

Project details

• Start: flexible
• Location: City of London, UK, GB