SIEM Engineer (Fixed-Term Contract) – Detection & SOAR

Barclay Simpson; Greater London; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

Barclay Simpson is seeking a SOC Engineer to advance the maturity of a SIEM platform within a global legal firm. The role focuses on onboarding log sources, optimising data pipelines, developing advanced detection use cases, and strengthening security monitoring and response.

You will contribute to security service improvements and core operational processes, including incident, change, and problem management, and support security controls design and reviews. Out-of-hours support may be required.

Qualifications

• Degree (Level 4+) in a computing-related subject or equivalent experience.
• Background across IT infrastructure and information security roles.
• Relevant certifications (GIAC, SC-200/SC-100, CISSP, SSCP, CSIS).
• Strong scripting skills (Python, PowerShell, PowerApps).
• Excellent communication skills with stakeholders at all levels.
• Proactive, self-driven approach with strong analytical capability.

Responsibilities

• SIEM Engineering & Optimisation: improve performance, ingestion, correlation logic.
• Onboard new log sources across cloud, network, endpoint and applications.
• Develop parsers, connectors and ingestion playbooks.
• Detection Engineering: design and tune MITRE ATT&CK-aligned detections and dashboards.
• SOC & Incident Response Support: assist analysts and investigations with advanced SIEM queries.
• Documentation & Governance: maintain data models, integrations and detection logic.

Skills

SIEM platforms

Log formats

Detection engineering

SOAR

Scripting: Python

Scripting: PowerShell

Scripting: PowerApps

Education

Degree (Level 4+) in computing or equivalent

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

ArcSight

LogRhythm

Exabeam

Job description

Barclay Simpson is seeking a SOC Engineer to advance the maturity of a SIEM platform within a global legal firm. The role focuses on onboarding log sources, optimising data pipelines, developing advanced detection use cases, and strengthening security monitoring and response.

You will contribute to security service improvements and core operational processes, including incident, change, and problem management, and support security controls design and reviews. Out-of-hours support may be required.