DV Cleared Lead Security Engineer — SIEM & SOC Architect

CBSbutler Holdings Limited trading as CBSbutler; Hemel Hempstead; On-site; GBP 92,000 - 129,000; Full time

Job summary

CBSbutler Holdings Limited trading as CBSbutler seeks a DV-cleared Managing Security Engineer to lead design, implementation, and optimization of security monitoring platforms feeding into a central SOC. The role focuses on building scalable SIEM solutions, improving detection capabilities, and strengthening client security posture while remaining hands-on.

Responsibilities include deploying Elastic and Splunk, designing log pipelines, and driving automation and CI/CD for SIEM platforms within

Qualifications

• Proven leadership in security engineering and client-facing environments.
• Experience with large-scale log ingestion and data models.
• Hands-on expertise in Elastic Stack and Splunk.

Responsibilities

• Lead design and deployment of security monitoring tools (Elastic & Splunk).
• Build and optimise large-scale log ingestion pipelines and data models (ECS/CIM).
• Develop and tune detection rules using KQL, EQL, and SPL.
• Drive detection engineering lifecycle aligned to MITRE ATT&CK.
• Implement automation, CI/CD, and Infrastructure as Code for SIEM platforms.
• Ensure platform performance, scalability, and resilience (HA/DR, clustering).
• Collaborate with stakeholders to assess risk and deliver security improvements.

Skills

Security Engineering Leadership

SIEM Operations

Elastic Stack

Splunk Enterprise

Detection Engineering

CI/CD & Automation

Tools

Elastic Stack

Splunk

Terraform

Ansible

CI/CD pipelines

Job description

CBSbutler Holdings Limited trading as CBSbutler seeks a DV-cleared Managing Security Engineer to lead design, implementation, and optimization of security monitoring platforms feeding into a central SOC. The role focuses on building scalable SIEM solutions, improving detection capabilities, and strengthening client security posture while remaining hands-on.

Responsibilities include deploying Elastic and Splunk, designing log pipelines, and driving automation and CI/CD for SIEM platforms within