Senior Cyber Security Engineer - SIEM & Data Insights (Hybrid)

Leonardo SpA; Bristol; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

A leading aerospace and defense firm is seeking a skilled Principal Cyber Security Engineer to join their Enterprise Security Engineering Team in Bristol. This hybrid role offers the opportunity to shape the future of cyber defense for the UK's critical national systems, focusing on issues such as SIEM management and complex enterprise applications. Candidates should have a strong background in enterprise networking and operational experience in Unix/Linux and Windows environments, along with familiarity in automation tools and security technologies.

Benefits

Generous leave and flexi-days

Award-winning pension scheme

Access to mental health support

Bonus scheme for employees

Learning resources via Coursera

Referral program incentives

Flexible benefits package

Qualifications

• Strong knowledge of enterprise networking, including TCP/IP networks, DHCP, and DNS.
• Experience troubleshooting network and system issues at the packet level.
• Operational experience with Unix/Linux and Windows environments.

Responsibilities

• Manage SIEM (Splunk) for high availability and performance.
• Drive continual improvement in system configurations.
• Lead integration of new log sources aligning with CIM data structures.

Skills

Strong knowledge of enterprise networking

Experience troubleshooting network and system issues

Infrastructure build and configuration experience

Operational experience with Unix/Linux and Windows

Exposure to endpoint protection tools

Ability to troubleshoot complex applications

Familiarity with automation tools

Understanding of virtualisation and containerisation

Job description

A leading aerospace and defense firm is seeking a skilled Principal Cyber Security Engineer to join their Enterprise Security Engineering Team in Bristol. This hybrid role offers the opportunity to shape the future of cyber defense for the UK's critical national systems, focusing on issues such as SIEM management and complex enterprise applications. Candidates should have a strong background in enterprise networking and operational experience in Unix/Linux and Windows environments, along with familiarity in automation tools and security technologies.