Onsite Cyber Security Engineer: SIEM & Threat Detection

Meritus; Stevenage; On-site; GBP 7,577,000 - 12,690,000; Full time

Job summary

Meritus is seeking a Cyber Security Engineer to join our client in Stevenage on a 24‑month, onsite contract. The role focuses on maintaining and enhancing cyber security tooling, with emphasis on SIEM, network visibility, log ingestion and alert tuning.

You’ll guide tool integrations and improve efficiency across SOC platforms. The ideal candidate demonstrates strong coding in PowerShell and Python, plus experience with Windows and Linux environments, virtualization, and security tooling.

Qualifications

• Experience across cyber security engineering and infrastructure technologies.
• Strong coding and scripting skills, particularly PowerShell and Python.
• Experience with APIs, including HTTP/S headers and responses and JSON objects.
• Knowledge of Windows (IIS) and Unix/Linux ({*Nix) remote storage, including NFS.
• Experience configuring IIS (Windows Web Server).
• Knowledge of Active Directory and LDAP authentication.
• Experience applying certificates, software updates and patches, including activities associated with technology refresh and end-of-life replacement.
• Experience with VMware and/or Hyper-V virtual machines and virtual switches.
• Experience implementing, configuring and maintaining cyber security tooling.
• Experience creating, testing and maintaining AI or machine-learning technologies to optimise workflows or security playbooks.
• Experience with SIEM technologies and security monitoring platforms

Responsibilities

• Maintain SOC toolset mappings, integrations, data feeds and topology.
• Improve visibility and optimization of SOC tools through data modelling and tuning.
• Maintain core SOC toolsets, availability and functionality.
• Monitor security tech readiness across in-scope environments.
• Advise on End-of-Life and End-of-Support roadmaps.
• Plan and coordinate SOC appliance upgrades.
• Implement new cyber security capabilities and integrate with existing tools.
• Configure security tools and report through CABs and control boards.
• Lead scripting activities and ensure proper documentation and testing.
• Investigate false positives and other security detection issues.
• Act as SME for SOC connectivity and network visibility.

Skills

PowerShell

Python

Regex

APIs

JSON

HTTP/S

Proxy config

Windows server

Linux

Active Directory

LDAP

SIEM

Virtualization

Tools

VMware/Hyper-V

IIS

NFS

CABs

Job description

Meritus is seeking a Cyber Security Engineer to join our client in Stevenage on a 24‑month, onsite contract. The role focuses on maintaining and enhancing cyber security tooling, with emphasis on SIEM, network visibility, log ingestion and alert tuning.

You’ll guide tool integrations and improve efficiency across SOC platforms. The ideal candidate demonstrates strong coding in PowerShell and Python, plus experience with Windows and Linux environments, virtualization, and security tooling.