SIEM Application Engineer (Elastic Security) - Manchester, UK

Randstad Technologies Recruitment; Manchester; Hybrid; GBP 100,000 - 125,000; Part time

Job summary

A recruitment agency is seeking a SIEM Application Engineer for a 3-month contract based in the UK. This hybrid role requires strong expertise in the Elastic Stack (ELK) and cybersecurity engineering. The ideal candidate will possess advanced skills in creating high-fidelity detection rules and optimizing Elasticsearch for maximum performance. The contractor will be responsible for leveraging Kibana for real-time monitoring and ensuring compliance with industry regulations. Payrate ranges from £450 to £550 per day.

Qualifications

• 5+ years of experience in cybersecurity engineering with Elastic Stack.
• Proven ability to implement security controls and compliance measures.
• Strong skills in performance tuning and optimization of Elasticsearch.

Responsibilities

• Deliver and operate the Elastic Stack with a focus on security.
• Engineer detection rules based on MITRE ATT&CK Framework.
• Leverage Kibana for visualization and monitoring of security outcomes.

Skills

Cybersecurity engineering experience

Elastic Stack (ELK)

Engineering detection rules

Performance tuning Elasticsearch

Data governance

Job description

Role

SIEM Application Engineer

Type

Contract (3 Months)

Location

Birmingham/Manchester, UK (Hybrid 3 days a week)

Payrate

450 - 550 per day INSIDE IR35 Umbrella

Key Responsibilities & Qualifications

• Elastic Stack Mastery: 5+ years of cybersecurity engineering experience, specializing in the end-to-end delivery, optimization, and operation of the Elastic Stack (ELK), with a focus on Elastic Security.
• Detection & Compliance Expert: Proven ability to engineer high-fidelity detection rules based on the MITRE ATT&CK Framework, alongside implementing essential security controls like RBAC, encryption, and data governance to ensure regulatory compliance.
• Performance & Tuning Specialist: Deep technical skill in fine‑tuning Elasticsearch indices and mappings and optimizing Logstash pipelines for maximum performance, throughput, and efficient resource utilisation.
• Outcome Ownership: Results‑driven professional focused on owning security outcomes, leveraging Kibana for critical data visualisation, real‑time monitoring, and system health tracking.

Randstad Technologies is acting as an Employment Business in relation to this vacancy.