SIEM Engineer

Fynity; London; Hybrid; GBP 45,000 - 75,000; Full time

Job summary

An established industry player is seeking a skilled SIEM Content Engineer to join their Security Operations Centre team. This hybrid role offers the opportunity to work on critical technology projects in national security and defense. You will be responsible for developing and maintaining SIEM content, analyzing data to detect threats, and collaborating with a talented team of SOC Analysts and Engineers. If you have a passion for security and are looking to elevate your skills in a dynamic environment, this position is perfect for you. Join a team dedicated to making a difference in national security!

Qualifications

• 3+ years of experience with SIEM tools like Splunk, Sentinel, or QRadar.
• Strong understanding of security protocols and frameworks.

Responsibilities

• Develop and maintain SIEM content including rules and dashboards.
• Analyse SIEM data to detect and respond to threats.

Skills

SIEM Tools

Problem-solving

Communication Skills

Scripting (Python, PowerShell, regex)

Education

Security Certifications (CISSP, CISM)

Tools

Splunk

Sentinel

QRadar

Job description

SIEM Content Engineer – National Security & Defence
Hybrid role -Hemel Hempstead (1 day/week on-site)
Clearance: Must hold or be eligible for DV

I have a great opportunity for a Skilled SIEM professional to work as a SIEM Content Engineer working for a leading consultancy’s Security Operations Centre (SOC) team. The role will be focused on Country Critical technology in the defence and national security space.

Key Responsibilities

1. Develop and maintain SIEM content (rules, dashboards, reports)
2. Analyse SIEM data to detect and respond to threats
3. Collaborate with SOC Analysts, Architects, and Engineers
4. Stay current on emerging threats and incorporate into detection logic
5. Support security standards and best practices

Requirements:

1. 3+ years with SIEM tools (Splunk, Sentinel, QRadar)
2. Strong understanding of security protocols and frameworks (NIST, ISO, PCI DSS)
3. Scripting experience (Python, PowerShell, regex)
4. Excellent problem-solving and communication skills
5. Security certifications (CISSP, CISM, etc.) would be a plus.

This is a chance to take your SIEM skills to the next level and be part of a team that is helping to defend the country.