SIEM Engineer

LA International Computer Consultants Ltd; Wokingham; On-site; GBP 50,000 - 70,000; Full time

Job summary

A UK-based cybersecurity consultancy is seeking a skilled individual for SIEM Deployment & Management. The role involves configuring and maintaining SIEM tools, monitoring security logs, and improving cybersecurity posture. Candidates should possess strong knowledge in security engineering, relevant certifications like CISSP or CEH, and analytical expertise in identifying threats and misconfigurations. This position requires onsite presence three days a week in Wokingham.

Qualifications

• Strong knowledge and experience in SIEM & EDR platforms and network security.
• Familiarity with scripting languages such as Python or KQL.
• Ability to analyze large datasets to identify threats and misconfigurations.

Responsibilities

• Set up, configure, and maintain SIEM tools.
• Monitor security logs and detect anomalies.
• Work with IT and security teams to enhance cybersecurity posture.

Skills

Security engineering expertise

Knowledge of SIEM & EDR platforms

Analytical thinking

Communication skills

Education

CISSP or CEH certification

AZ-500 or SC-100

Tools

Sentinel

Tanium

Elastic EDR

FireEye

PowerShell

Job description

REQUIRES SC CLEARANCE, ONSITE 3 DAYS IN WOKINGHAM

Role Description

SIEM Deployment & Management - Set up, configure, and maintain SIEM tools like Sentinel, Elastic.

EDR deployment, configuration & management - experience with tools like Tanium, Trellix, FireEye, Defender, Elastic EDR

Threat Detection & Analysis - Monitor security logs, detect anomalies, and investigate potential threats.

Experience configuring Syslog servers and maintaining and configuring syslog feeds

Log ingestion Creation for Sentinel - Deploy OOTB integrations & develop & deploy custom integrations for various log source types.

Collaboration - Work with IT and security teams to improve overall cybersecurity posture.

Required Skills & Qualifications

Technical expertise. Strong knowledge & experience in security engineering with SIEM & EDR platforms, network security, and understanding of cybersecurity frameworks.

Certifications - CISSP, CEH, GIAC, or vendor-specific SIEM certifications, AZ-500, SC-100,etc.

Programming & Scripting - Familiarity with Python, PowerShell,?KQL (Kusto query language), KQL (Kibana Query Language)?or other scripting languages.

Analytical Thinking & problem solving - Ability to analyze large datasets and identify threats, mitigations, misconfigurations, etc.

Communication Skills - Ability to document findings and communicate effectively with stakeholders