Principal Security Consultant - SIEM

JR United Kingdom; London; On-site; GBP 60,000 - 100,000; Full time

Job summary

An innovative firm is seeking a Principal Security Consultant to lead the design and deployment of enterprise-grade SIEM platforms. This role involves collaborating with stakeholders to define logging requirements, creating tailored detection rules, and providing technical leadership to the team. Ideal candidates will have hands-on experience with major SIEM platforms and a deep understanding of log ingestion and threat detection. Join a forward-thinking company where your expertise will shape security strategies and enhance organizational resilience against cyber threats.

Qualifications

• Lead design and deployment of enterprise-grade SIEM platforms.
• Collaborate with stakeholders for logging requirements and detection rules.
• Provide technical leadership and mentorship to team members.

Responsibilities

• Oversee integration of data sources from various layers.
• Conduct SIEM health checks and performance tuning.
• Work closely with SOC teams to align SIEM capabilities.

Skills

SIEM design

Splunk

Azure Sentinel

log ingestion

MITRE ATT&CK framework

cloud logging

threat modelling

Tools

Splunk

Azure Sentinel

AWS CloudTrail

Azure Monitor

GCP

Job description

Social network you want to login/join with:

Principal Security Consultant - SIEM, london

col-narrow-left

Client:

RiverSafe

Location:

london, United Kingdom

Job Category:

Other

-

EU work permit required:

Yes

col-narrow-right

Job Views:

4

Posted:

28.04.2025

Expiry Date:

12.06.2025

col-wide

Job Description:

Role

• Lead the design, deployment and tuning of enterprise-grade SIEM platforms (e.g. Splunk, Azure Sentinel etc.)
• Collaborate with stakeholders to define logging requirements, use cases, detection rules and dashboards
• Oversee integration of data sources from cloud, on-prem, endpoint, network and application layers
• Create and maintain detection rules, correlation logic and alerts tailored to specific threat scenarios
• Provide technical leadership and mentorship to team members
• Work closely with SOC teams to align SIEM capabilities with business objectives
• Conduct SIEM health checks, performance tuning and capacity planning

Skills

• Expertise in SIEM design, deployment and optimisation
• Hands-on expertise with one or more major SIEM platforms (e.g. Splunk, Sentinel etc.)
• Deep understanding of log ingestion, parsing, normalisation and enrichment
• Strong grasp of MITRE ATT&CK framework, threat detection and alert logic
• Experience with cloud logging and monitoring (AWS CloudTrail, Azure Monitor, GCP etc.)
• Experience with threat modelling, cloud security or Identity and Access Management is desirable