Security Platform Engineer - SIEM & Automation

Infosec; Stevenage; On-site; GBP 76,000 - 127,000; Full time

Job summary

Infosec is seeking a Cyber Security Engineer for a hands-on, on-site role in Stevenage to support a mature Cyber Security Operations function. You will implement, maintain and optimise security technologies across complex environments, with a focus on SIEM, tooling, and automation.

The role involves integrating platforms via APIs, developing automation scripts in PowerShell and Python, and collaborating with SOC analysts to reduce false positives and improve detection capabilities.

Qualifications

• Experience in SIEM administration and security tooling deployment across enterprise environments.
• Ability to ingest and correlate data from multiple sources and tune alerts.
• Proficient in automation with PowerShell, Python, and regular expressions.

Responsibilities

• Administer and maintain SIEM and security monitoring platforms
• Configure and optimise log ingestion, correlation rules and alerting
• Develop and maintain automation using PowerShell, Python and Regex
• Integrate security technologies using APIs, HTTP/S and JSON
• Implement, maintain and optimise cyber security tooling
• Manage platform upgrades, patching and technology refresh activities
• Administer security appliance certificates and lifecycle activities
• Onboard new data sources into security platforms
• Lead tool integration and capability enhancement projects
• Support incident investigations through advanced queries and custom scripting
• Maintain platform availability, resilience and performance
• Work closely with SOC analysts to improve detection capabilities and reduce false positives
• Support change management, CAB activities and technical implementation planning

Skills

SIEM administration

Security tooling

Log onboarding

Detection engineering

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

LogRhythm

ArcSight

Wazuh

SOAR platforms

AI security automation

Job description

Infosec is seeking a Cyber Security Engineer for a hands-on, on-site role in Stevenage to support a mature Cyber Security Operations function. You will implement, maintain and optimise security technologies across complex environments, with a focus on SIEM, tooling, and automation.

The role involves integrating platforms via APIs, developing automation scripts in PowerShell and Python, and collaborating with SOC analysts to reduce false positives and improve detection capabilities.