Security Monitoring Engineer - SIEM & Cloud Threat Detection

Forsyth Barnes; Manchester; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

Forsyth Barnes is seeking a Cyber Security Engineer in Manchester to join a high-performing security function protecting a critical national infrastructure environment. This role is hands-on, focusing on security monitoring, tooling, threat detection and collaborating with technology, security and operations teams.

You will maintain and enhance our Elastic SIEM and security controls across AWS and Azure, support SOC/NOC activities, and help improve detections and incident response in an evolving

Qualifications

• Hands-on cyber security engineering and operations experience.
• Experience with security monitoring, detection and incident investigation.
• Familiarity with log management and telemetry pipelines.

Responsibilities

• Manage, maintain and develop the Elastic SIEM platform.
• Improve security monitoring, detection and response capabilities.
• Support SOC and NOC activities.
• Design and enhance security controls across AWS and Azure.
• Support DLP initiatives and associated controls.
• Deliver log ingestion, transformation and integration.
• Collaborate with Security Operations, Cloud, Security Architecture and Governance teams.
• Investigate security events and improve threat detection.

Skills

Cyber security engineering

Security operations

SIEM

Cloud security (AWS/Azure)

Incident investigation

Analytical troubleshooting

Stakeholder management

Tools

Elastic SIEM

AWS

Azure

Job description

Forsyth Barnes is seeking a Cyber Security Engineer in Manchester to join a high-performing security function protecting a critical national infrastructure environment. This role is hands-on, focusing on security monitoring, tooling, threat detection and collaborating with technology, security and operations teams.

You will maintain and enhance our Elastic SIEM and security controls across AWS and Azure, support SOC/NOC activities, and help improve detections and incident response in an evolving