Cyber Security Engineer

Matchtech; Stevenage; On-site; GBP 76,000 - 127,000; Full time

Job summary

Matchtech is recruiting for a Cyber Security Engineer to join a mature Security Operations function in Stevenage on a 24-month contract, onsite. The role focuses on implementing, maintaining, and optimising security technologies across complex environments.

Key tasks include SIEM administration, log ingestion, automation via PowerShell/Python, and API integrations. This is a hands-on engineering position within the Defence sector, with strong emphasis on tooling and detection engineering.

Qualifications

• Hands-on experience implementing and maintaining security tooling.
• Experience with SIEM administration and security monitoring.
• Ability to automate with scripting and integration via APIs.

Responsibilities

• Administer and maintain SIEM and security monitoring platforms.
• Configure log ingestion, correlation rules and alerting.
• Develop automation using PowerShell, Python and Regex.
• Integrate security technologies via APIs, HTTP/S and JSON.
• Lead tool integration projects and capability enhancements.
• Support incident investigations and improve detection capabilities.

Skills

SIEM Administration

Automation Scripting

Detection engineering

Tools

PowerShell

Python

Regex

REST APIs

HTTP/S

JSON

Active Directory

Windows Server

Linux/Unix

VMware

Hyper-V

Virtual Networking

Job description

Cyber Security Engineer

Stevenage | Up to £92 per hour (Inside IR35) | 24 Month Contract | Onsite Stevenage

We're supporting a leading organisation within the Defence sector in the recruitment of a Cyber Security Engineer to join a mature Cyber Security Operations function.

This is a hands-on engineering role focused on the implementation, maintenance, optimisation and integration of security technologies across complex enterprise environments.

Key Responsibilities

• Administer and maintain SIEM and security monitoring platforms
• Configure and optimise log ingestion, correlation rules and alerting
• Develop and maintain automation using PowerShell, Python and Regex
• Integrate security technologies using APIs, HTTP/S and JSON
• Implement, maintain and optimise cyber security tooling
• Manage platform upgrades, patching and technology refresh activities
• Administer security appliance certificates and lifecycle activities
• Onboard new data sources into security platforms
• Lead tool integration and capability enhancement projects
• Support incident investigations through advanced queries and custom scripting
• Maintain platform availability, resilience and performance
• Work closely with SOC analysts to improve detection capabilities and reduce false positives
• Support change management, CAB activities and technical implementation planning

Essential Technical Skills

Security Platforms

• SIEM administration and support
• Security tooling implementation and maintenance
• Log onboarding and data source integration
• Detection engineering and alert tuning

Scripting & Automation

• PowerShell
• Python
• Regex

Integration Technologies

• REST APIs
• HTTP/S
• JSON

Infrastructure

• Active Directory
• LDAP
• Windows Server
• IIS
• SMB Storage
• Linux / Unix
• NFS Storage
• VMware
• Hyper-V
• Virtual Networking

Security Engineering

• Certificate Management
• PKI
• Software Upgrades
• Security Platform Refresh Activities
• End of Life (EOL) Migrations
• End of Support (EOS) Upgrades
• Security Appliance Administration
• Threat Detection Technologies

Desirable

• Splunk
• Microsoft Sentinel
• QRadar
• Elastic
• LogRhythm
• ArcSight
• Wazuh
• SOAR Platforms
• AI / Machine Learning Security Automation
• Proxy Administration
• Network Packet Capture Technologies
• EDR / XDR Platforms

Contract Details

• Up to £92 per hour (Inside IR35)
• 24 Month Contract
• Stevenage
• 5 Days Onsite
• Single Stage Interview Process
• Defence Sector Environment

This role is best suited to Cyber Security Engineers, Security Engineers, SIEM Engineers, Security Platform Engineers and Detection Engineers with strong experience across security tooling, automation and platform engineering.