SIEM Engineer

Arup; Deutschland; Hybrid; EUR 70.000 - 105.000; Vollzeit

Zusammenfassung

Arup is seeking an experienced SIEM Engineer to support a large-scale cybersecurity transformation in Cardiff. The role focuses on migrating monitoring from Rapid7 to Microsoft Sentinel, onboarding log sources, and building detection capabilities across a 1000+ system estate.

You will design scalable monitoring, tune rules and alerts, and collaborate with security operations and engineering teams to ensure a smooth transition.

Qualifikationen

• Minimum proven experience as SIEM Engineer or similar role.
• Hands-on migration experience from Rapid7, Splunk, QRadar, ArcSight, or similar.
• Experience with large, complex enterprise environments.
• Strong practical knowledge of Microsoft Sentinel and log data ingestion.
• Experience onboarding diverse log sources and creating detection rules.
• Knowledge of log transformation, normalisation, and alert tuning.

Aufgaben

• Lead migration of security monitoring from Rapid7 to Microsoft Sentinel.
• Normalize and import security logs into Sentinel.
• Onboard a large volume of log sources across the estate.
• Develop and tune detection rules, analytics, and use cases.
• Build and maintain alerts to improve threat detection and reduce false positives.
• Collaborate with security operations and engineering teams during migration.

Kenntnisse

SIEM engineering

Threat detection

Incident response

Migration experience

Log ingestion

Tools

Microsoft Sentinel

Rapid7

Splunk

QRadar

ArcSight

Jobbeschreibung

SIEM Engineer

2026-09-10T00:00:00

Location: Newport, Gwent, GB, NP20 1

Application Deadline: 2026-12-09T21:01:44.583

Any

About the Company

Dedicated to sustainable development, Arup is a collective of designers, consultants and experts working globally. At Arup you will have the opportunity to collaborate on ambitious projects - delivering remarkable outcomes for clients and communities, and to do socially useful work that has meaning. Arup's purpose, shared values and collaborative approach has set it apart for over 75 years, and now is your opportunity to join. AMS is a global workforce solutions partner committed to creating inclusive, dynamic, and future-ready workplaces. We help organisations adapt, grow, and thrive in an ever-evolving world by building, shaping, and optimising diverse talent strategies. We partner with Arup to support their contingent recruitment processes. Acting as an extension of their recruitment teams, we connect them with skilled interim and temporary professionals, fostering workplaces where everyone can contribute and succeed.

Job Title

SIEM Engineer

Contract Details

12-month contract based in Cardiff with remote work available.

Purpose of the Role

We're looking for an experienced SIEM Engineer to play a key role in a large scale cybersecurity transformation programme, migrating security monitoring capabilities from Rapid7 to Microsoft Sentinel. This is a hands‑on engineering role focused on SIEM migration, log source onboarding, detection engineering, and the optimisation of security monitoring across a complex enterprise environment with over 1,000 systems.

What You'll Do

• Lead the migration of security monitoring capabilities from Rapid7 to Microsoft Sentinel.
• Transform, normalise, harmonise, and import security log data into Sentinel.
• Onboard and integrate a large volume of log sources across the estate.
• Recreate and optimise detection rules, analytics, and use cases within Microsoft Sentinel.
• Build, tune, and maintain alerts to improve threat detection and reduce false positives.
• Support the design and implementation of scalable SIEM monitoring capabilities.
• Work closely with security operations and engineering teams to ensure a smooth migration and transition.

The Skills You'll Need

• Proven experience working as a SIEM Engineer, Cyber Security Engineer, or Security Monitoring Engineer.
• Previous SIEM migration experience, particularly migrations from Rapid7, Splunk, QRadar, ArcSight, or similar platforms.
• Experience working within large, complex enterprise environments.
• Strong hands‑on experience with Microsoft Sentinel.
• Experience onboarding and integrating security log sources.
• Knowledge of log transformation, normalisation, and data ingestion processes.
• Experience creating, migrating, and tuning detection rules and alerts.
• Strong understanding of security monitoring, threat detection, and incident response.

About the Client

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. Guided by its values and alignment with the UN Sustainable Development Goals, Arup creates and contributes to equitable spaces and systems, while cultivating a sense of belonging for all. Arup's internal employee networks support their inclusive culture, from race, ethnicity and cross-cultural working to gender equity, LGBTQ+ and disability inclusion - creating a space for everyone to express themselves and make a positive difference.

AMS are committed to providing all our candidates with the opportunity to perform at their best throughout the recruitment process. Please let us know if you require any additional support or reasonable adjustments during the screening process and we will work with you and Arup to identify the best solution to meet your requirements. AMS, a Recruitment Process Outsourcing Company, may in the delivery of some of its services be deemed to operate as an Employment Agency or an Employment Business.