Elastic SIEM Engineer – Security Analytics Lead

Experis (Austria); Birmingham; Presencial; GBP 92.000 - 148.000; Jornada completa

Descripción de la vacante

Experis is seeking a Software engineering specialist in Birmingham to join a Security Engineering team as a SIEM Application Engineer. The role focuses on design, development, operation and optimisation of an Elastic-based SIEM platform to strengthen threat detection and incident response.

You will configure Elasticsearch pipelines, collaborate on SIEM designs, and optimise rules, alerts and dashboards to improve detection and efficiency.

Formación

• Bachelor's or Master's in Computer Science, Information Systems, Engineering, or related field.
• Experience in software engineering roles.
• Strong scripting and analytical/troubleshooting skills with attention to detail.
• Solid networking basics and willingness to learn new technologies quickly.
• Ability to take ownership of outcomes and deliver reliably for customers.

Responsabilidades

• Configure Elasticsearch pipelines to ingest security data (including from Kafka) and improve enrichment with threat intelligence and context
• Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch
• Optimise SIEM rules, alerts and dashboards to improve detection accuracy and operational efficiency
• Write and refine Elasticsearch queries for fast, relevant event retrieval; monitor and manage platform performance
• Support security engineering activities across transitions and transformations
• Work closely with Security Operations and incident-response systems, staying current with emerging threats and best practices

Conocimientos

Software engineering experience

Troubleshooting

Educación

Bachelor's or Master's in Computer Science or related field

Herramientas

Elasticsearch

Logstash

Kibana

Ansible

Kafka

Kubernetes

GitLab pipelines

ArgoCD

Scripting

YAML

Helm

Descripción del empleo

Experis is seeking a Software engineering specialist in Birmingham to join a Security Engineering team as a SIEM Application Engineer. The role focuses on design, development, operation and optimisation of an Elastic-based SIEM platform to strengthen threat detection and incident response.

You will configure Elasticsearch pipelines, collaborate on SIEM designs, and optimise rules, alerts and dashboards to improve detection and efficiency.