SIEM Engineer

FNZ; London; On-site; GBP 50,000 - 90,000; Full time

Job summary

Join a forward-thinking company as a SIEM Engineer, where you will play a crucial role in enhancing security measures for investment solutions. Your expertise in managing SIEM technologies like Splunk and Microsoft Sentinel will be vital in protecting platforms that serve over 20 million users. This role offers the opportunity to work on the cutting edge of cybersecurity, designing monitoring solutions, onboarding data, and developing use cases to respond to emerging threats. Collaborate with cross-functional teams globally and contribute to a roadmap that shapes the future of security at FNZ. If you're passionate about making wealth management more secure and accessible, this role is perfect for you.

Qualifications

• 4+ years of experience managing SIEM in a distributed environment.
• Strong experience with Splunk and Microsoft Sentinel administration.

Responsibilities

• Manage and enhance SIEM solutions for FNZ Group.
• Collaborate with teams to support incident response and threat intelligence.

Skills

SIEM Management

Incident Response

Automation and Scripting

Security Frameworks Knowledge

Data Onboarding

Education

Relevant Security Certifications (e.g., SSCP)

Tools

Splunk

Microsoft Sentinel

Jira

Confluence

Planner

Job description

Role Description

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here in the Global Information Security team, we work to protect the platforms that support investment solutions for over 20 million people.

We are looking for an experienced SIEM Engineer, reporting to the Cyber Security Engineering Manager (SIEM). You will have a strong background in designing and developing monitoring solutions and will be familiar with onboarding data from varied sources. You will have strong experience of different SIEM architectures and be adaptable in your approach. Your role in FNZ will be to manage and enhance the SIEM solutions for the FNZ Group, supporting the lifecycle of data onboarding, use cases and automating responses.

Specific Role Responsibilities

• Support the creation and delivery of the roadmap and architecture for the SIEM solutions in FNZ.
• Deploy, manage and enhance the SIEM technology in FNZ
  • Managing the SIEM infrastructure
  • Log onboarding
  • Rules and Use case development
  • Schema management
  • Threat Intelligence integration
• Maintain up-to-date knowledge of emerging security threats and trends and build this into the SIEM strategy.
• Support the Incident Response team in FNZ to identify, manage and respond to incidents.
• Collaborate effectively with cross-functional teams across different time zones.

Experience Required

Primary Requirements

• Significant (4+ years) experience of design/administering/managing SIEM (Splunk/Sentinel) in a large, distributed environment.
• Strong experience with Microsoft Sentinel administration.
• Experience with Splunk Enterprise Security administration.
• Significant experience in the creation of rules and use cases to support business incident response.
• Strong experience in data onboarding and schema management.
• Strong understanding of multiple technologies:
  • Windows
  • Linux
  • Network devices (WAF, Firewalls, Switches)
  • Cloud
  • Application Logging
• Advanced automation and scripting capabilities, with hands-on knowledge of development best practices.
• Knowledge of Security Frameworks (NIST, MITRE etc).
• Relevant security certifications (e.g., SSCP, Vendor Certifications).
• Experience of working with tools like Jira, Planner and Confluence.