Security Consultant

JR United Kingdom; Guildford; Remote; GBP 35,000 - 50,000; Full time

Job summary

A leading company in cybersecurity is seeking a Security Consultant for a 3-month contract. This role involves enhancing threat detection capabilities through the deployment of a new SIEM solution and requires collaboration with delivery teams. The consultant will be responsible for developing SOC playbooks and automating response workflows, leveraging data ingestion from various sources. Candidates should have experience with SIEM technologies and a strong background in incident response.

Qualifications

• Experience with SIEM solutions and threat detection technologies.
• Familiarity with AWS, Qualys, and Jira integration.
• Ability to design and implement automation in incident response.

Responsibilities

• Collaborate to develop SOC playbooks for SIEM operations.
• Implement workflows for automating incident response.
• Build dashboards for real-time reporting and incident activities.

Skills

Collaboration

SOAR workflows

Incident response

Threat detection

Data ingestion

Dashboard customization

Job description

Social network you want to login/join with:

I am currently supporting a business engaged in the setup and deployment of a new Security Information and Event Management (SIEM) solution. The scope of work includes replacing the existing Trend Micro infrastructure and rolling out CrowdStrike across all server environments to enhance threat detection and response capabilities.

Job Title: Security Consultant

Job Type: 3 month Contract

Location: Remote

Responsibilities:

• Collaborate with delivery teams and the client to develop SOC playbooks supporting both SIEM and SOC operations.
• Design and implement SOAR workflows to automate incident response processes.
• Configure correlation searches and alerting mechanisms, optimising rules to minimise false positives.
• Serve as the Subject Matter Expert (SME) for SIEM deployment, supporting data ingestion from sources such as AWS and Qualys.
• Assist in the integration of SIEM alerts with Jira, enabling streamlined alert tracking and incident management.
• Define and configure alert severity levels within SIEM, SOAR, and Jira to align with established Service Level Agreements (SLAs).
• Build and customise dashboards to support real-time reporting and incident response activities.