SIEM Engineering

Description:

Your new company
You will be working for a known organisation. This role is working remotely with the occasional travel into the London office. The rate is £600 per day inside scope of IR35 and it's a 6-month contract.

Your new role

We are seeking a senior security engineer with strong hands-on Splunk and QRadar experience to support a client engagement for an initial six-month period. The role combines Splunk implementation, engineering and administration with operational monitoring, SOC support, incident management and security use case development.
Key Responsibilities

Support the implementation, configuration and ongoing operation of Spunk.
Provide Splunk administration, engineering, operational monitoring and platform support.
Work with both Splunk and QRadar within the client security environment.
Support SOC operations and incident management activities.
Develop security use cases and tune existing content to improve operational effectiveness.
Repoint log flows from Fluent Bit into Splunk.
Support API integrations into Expel.
Troubleshoot SIEM, logging and integration issues as part of the wider security engineering function.Essential Skills & Experience

Strong hands-on Splunk implementation and engineering experience.
Splunk administration, operations and monitoring experience.
Hands-on IBM QRadar experience.
Experience supporting SOC environments and security incident management.
Experience developing and tuning SIEM security use cases / detection content.
Experience with log ingestion, log routing or SIEM data onboarding.
Ability to work at a senior technical level across implementation and BAU operational support.Desirable Skills

Experience with Fluent Bit, particularly routing logs into Splunk.
API integration experience, ideally involving Expel.
Python scripting experience.
What you'll need to succeed

The requirement is strongly hands-on and combines SIEM engineering with operational security support.

What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV.
If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)