SIEM Engineer

CBSbutler Ltd.; Wokingham; Hybrid; GBP 100,000 - 125,000; Full time

Job summary

A recruitment consultancy is seeking a skilled SIEM Engineer for a hybrid role based in Wokingham, UK. The ideal candidate will support the deployment and management of SIEM and EDR platforms, including Microsoft Sentinel and Elastic SIEM. Key responsibilities involve configuring log ingestion, monitoring security logs, and collaborating with IT and SOC teams. Required qualifications include a strong background in security engineering, relevant certifications, and scripting skills in Python and PowerShell. This is a contract position for 3 months with a daily rate of £430 inside IR35.

Qualifications

• Strong background in security engineering, SIEM/EDR tooling, and network security.
• Experience with Syslog management and configuration.
• Proficient in log ingestion and threat detection.

Responsibilities

• Deploy, configure, and manage SIEM platforms.
• Build and optimise log ingestion pipelines.
• Monitor security logs and alerts.
• Investigate anomalies and provide actionable recommendations.

Skills

Security engineering

SIEM/EDR tooling

Network security

Analytical mindset

Scripting proficiency in Python

Scripting proficiency in PowerShell

Scripting proficiency in KQL

Scripting proficiency in Kibana Query Language

Education

CISSP

CEH

GIAC

AZ-500

SC-100

Tools

Microsoft Sentinel

Elastic SIEM

Tanium

Trellix

FireEye

Microsoft Defender

Elastic EDR

Job description

Job Title: SIEM Engineer

Location: Wokingham/Hybrid (3 days per week on site)

Duration: 3 months from the start

Rate: £430 per day inside ir35

SC security clearance is required for this role

We are looking for a highly skilled Security Engineer to support the deployment, configuration, and management of modern SIEM and EDR platforms. This role is ideal for someone with strong hands‑on technical security expertise and a passion for threat detection, analysis, and automation.

Key Responsibilities

• Syslog experience and/or strong Linux skills

SIEM Deployment & Management

• Configure, deploy, and maintain SIEM platforms such as Microsoft Sentinel or Elastic SIEM.
• Build and optimise log ingestion pipelines.

EDR Deployment & Management

• Manage and maintain tools including Tanium, Trellix, FireEye, Microsoft Defender, or Elastic EDR.

Threat Detection & Analysis

• Monitor security logs and alerts.
• Investigate anomalies, understand attack patterns, and provide actionable recommendations.

Syslog Management

• Configure and maintain Syslog servers.
• Manage Syslog feeds and ensure reliable log forwarding.

Log Ingestion for Sentinel

• Deploy out-of-the-box integrations.
• Develop custom connectors and ingestion methods for diverse log sources.

Collaboration

• Work closely with IT, SOC, and wider security teams to strengthen the organisation's cybersecurity posture.

Required Skills & Qualifications

• Strong background in security engineering, SIEM/EDR tooling, and network security.
• Certifications such as CISSP, CEH, GIAC, AZ-500, SC-100, or relevant vendor-specific credentials.
• Scripting proficiency in Python, PowerShell, KQL (Kusto Query Language), or Kibana Query Language.
• Strong analytical mindset with the ability to process large datasets, detect threats, and identify misconfigurations.
• Excellent written and verbal communication skills for documenting findings and engaging stakeholders.

If you are interested in this role please feel free to submit your CV

Many thanks,