SIEM Application Engineer

BT Group; Birmingham; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

10% on target annual bonus

Private GP 24/7 for you and family

Market-leading pension scheme

Job summary

BT Group in Birmingham is seeking a SIEM Application Engineer to support the development, deployment and operation of BT's strategic SIEM. You will design and maintain ingestion pipelines using Elasticsearch, Logstash and Kibana, and work with Kafka sources.

The role requires a solid software engineering background, scripting, and hands-on experience with Kubernetes and DevOps tools. Based in the Birmingham office, it is a hybrid role with three days in the office.

Qualifications

• The candidate must have a software engineering background with security focus.
• Proven experience with SIEM components and security logging/monitoring.
• Hands-on knowledge of Elasticsearch, Logstash and Kibana in production.
• Experience integrating data from Kafka sources and threat intel feeds.
• Familiarity with Kubernetes and DevOps pipelines (ArgoCD, Gitlab).
• Strong problem solving and attention to detail; quick learner.

Responsibilities

• Data ingestion and enrichment via Elasticsearch pipelines and Kafka sources.
• Develop SIEM solutions in collaboration with security analysts and architects.
• Optimize SIEM rules, alerts and dashboards for threat detection.
• Write efficient Elasticsearch queries and tune performance.
• Maintain SIEM infrastructure and monitor reliability and security.
• Collaborate on security engineering projects and incident response.

Skills

Software Engineering

Scripting

Kubernetes

Elasticsearch

Kafka

ArgoCD

Gitlab pipelines

YAML

Helm

Ansible

Basic networking

Troubleshooting

Willingness to learn

Attention to detail

Tools

Elasticsearch

Logstash

Kibana

Kafka

ArgoCD

Gitlab pipelines

YAML

Helm

Ansible

Linux

Windows

Job description

Job Title: SIEM Application Engineer
Req ID: 62567
Job Function: Cyber Security
Posting Start Date: 09/09/2026
Posting End Date: 23/09/2026
Division: Networks
Job Location: GBR-Birmingham-Three Snowhill
Advertised Salary: Competitive with Great Benefits
Job Req ID: 62567
Posting Date: 9th Sep 2026
Closing Date: 23rd Sep 2026
Location: Birmingham

About The Role

The new Network SIEM is essential to BT’s network security, meeting TSA requirements and improving our CAF level. Your role as a SIEM Application Engineer in Security Engineering is to support the development, implementation, operation and support of BTs Strategic SIEM development. We are seeking a skilled SIEM Security Engineer with expertise in SIEM and Security logging and monitoring to join our dynamic team. As a SIEM engineer, you will play a critical role in designing, developing, and maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture.

This role is based in BT's Birmingbam office & requires 3 days in office.

What You’ll Be Doing

• Data Ingestion and Enrichment:
• Configure Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka
• Enhance data enrichment by integrating threat intelligence feeds and contextual information.
• SIEM Solution Development:
• Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch.
• Optimize SIEM rules, alerts, and dashboards for efficient threat detection.
• Query Optimization and Performance Tuning:
• Write efficient Elasticsearch queries to retrieve relevant security events.
• Monitor and manage the performance of the SIEM infrastructure.
• Security Engineering:
• Contribute to security engineering projects, transitions, and transformations.
• Work closely with security operations and associated security incident response systems
• Stay informed about emerging threats and security best practices.

Essential Skills / Experience

• Proven experience in Software Engineering roles
• Experience in some of the following technologies:
• Scripting
• Kubernetes
• Elasticsearch - Logstash -Kibana
• Kafka
• ArgoCD
• Gitlab pipelines
• YAML
• Helm
• Ansible
• Basic networking
• Strong analytical and troubleshooting skills
• Willingness to learn new technologies
• Attention to detail

Desirable Skills / Experience

• Experience in SIEM Detection Engineering.
• Experience with log source onboarding and normalisation
• Knowledge of Linux, Windows and Network Administration
• Knowledge and experience of cloud services (public or private), OpenStack and K8S
• Devops practices

Our Package

Tailored benefits make a real difference. That’s why we offer a comprehensive range to support your growth, wellbeing, and everyday life. You can design the package to suit you and your lifestyle. Your core benefits include:

• 10% on target annual bonus
• Access to an online private GP 24/7 for you and your immediate family
• Market-leading paid carers leave with up to 2 weeks off
• Equalised maternity, paternity, and adoption leave – 18 weeks’ full pay and 8 weeks’ half pay
• Discounted EE and BT products, including mobile and broadband
• Market leading Pension scheme – 5% from you and 10% from us
• Holiday purchase scheme

You can select additional benefits, including healthcare, dental, gym memberships and more when you’re ready.

BT Group is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands – including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers.

BT Group’s role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive.

Having come through the most capital-intensive phase of our fibre investment, our focus now is on what comes next – simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best.

We have a singular culture that unites all our people: we are customer-first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.