OT SIEM Engineer | Flexible Work & Growth in Cyber Defense

Sword Group; Aberdeen City; Ibrido; GBP 65.000 - 95.000; Tempo pieno

Vantaggi offerti da questo lavoro

Personalised Career Development

Flexible working

Fantastic Benefits Package

Descrizione del lavoro

Sword is seeking an OT SIEM Engineer in the UK to strengthen cyber security monitoring across OT and enterprise environments, with a focus on Microsoft Sentinel. The role involves hands-on SIEM engineering, log onboarding, rule tuning, and automation to enhance threat detection and operations.

You will work with Cyber Defence and Security Operations teams, migrate data from existing SIEMs, and contribute to security monitoring improvements in a regulated environment.

Competenze

• Hands-on engineering role strengthening SIEM monitoring and threat detection.
• Experience onboarding log sources into enterprise SIEM platforms.
• Strong knowledge of log parsing, normalisation and event correlation.
• Proficiency in creating analytics rules, alerts and detection logic.
• Experience with automation via Logic Apps, Playbooks or SOAR tools.
• Familiarity with CI/CD pipelines using Git and Azure DevOps.
• Understanding of OT environments, Critical National Infrastructure and security operations.

Mansioni

• Onboard and integrate log sources into Microsoft Sentinel across OT and enterprise environments.
• Develop and maintain parsers, data transformations and normalisation for telemetry.
• Design and optimise KQL queries to support monitoring and threat detection.
• Create, tune and maintain analytics rules, alerts and detection logic.
• Develop and support automation workflows to improve security operations.
• Assist migration of telemetry from existing SIEMs like LogRhythm to Sentinel.
• Contribute to threat hunting and incident response activities.

Conoscenze

SIEM engineering

KQL queries

Log onboarding

Log parsing

Data normalisation

Event correlation

CI/CD pipelines

Azure DevOps

Git

Logic Apps

SOAR automation

Threat hunting

Incident response

Security monitoring

Automation

Strumenti

LogRhythm

Splunk

QRadar

ArcSight

Elastic

Microsoft Sentinel

Git

Azure DevOps

Descrizione del lavoro

Sword is seeking an OT SIEM Engineer in the UK to strengthen cyber security monitoring across OT and enterprise environments, with a focus on Microsoft Sentinel. The role involves hands-on SIEM engineering, log onboarding, rule tuning, and automation to enhance threat detection and operations.

You will work with Cyber Defence and Security Operations teams, migrate data from existing SIEMs, and contribute to security monitoring improvements in a regulated environment.