SIEM Security Engineer

BT Group; Birmingham; Hybrid; GBP 65,000 - 95,000; Full time

Benefits offered by this job

10% on target annual bonus

Online private GP 24/7 for you and a4"

Pension scheme – 5% from you and 10%来自

Job summary

BT Group is seeking a SIEM Security Engineer in Birmingham to design, develop and maintain our strategic SIEM ingestion and monitoring. You will work on data ingestion pipelines, threat detection use cases and performance tuning within a security engineering team.

Role requires strong SIEM experience, familiarity with Elastic Stack, and collaboration with Security Operations. Hybrid work style with three days in the office fulfills this critical security function for BT Group.

Qualifications

• Proven experience in SIEM Detection Engineering.
• Experience with SIEM technologies and log onboarding/normalisation.
• Degree in a related field and 5+ years delivering cybersecurity solutions.

Responsibilities

• Ingest data from diverse sources and enrich with threat intel.
• Design and implement SIEM solutions using Elasticsearch.
• Tune use cases and monitor performance of the SIEM infrastructure.
• Collaborate with security operations and engineering stakeholders.

Skills

SIEM Detection Engineering

Elasticsearch

Threat detection

Security logging

MITRE ATT&CK

Security Operations collaboration

Education

Bachelor's/Master's degree in Computer Science / Information Systems / Engineering

Tools

Elastic Stack

Kafka

NGFW

Proxies

IAM solutions

Job description

Job Description

Job Title: SIEM Security Engineer

Req ID: 62443

Job Function: Cyber Security

Posting Start Date: 03/09/2026

Posting End Date: 01/10/2026

Division: Networks

Job Location: GBR-Birmingham-Three Snowhill

Advertised Salary: Competitive with Great Benefits

Job Req ID: 62443

Posting Date: 3rd Sep 2026

Closing Date: 1st Oct 2026

Location: Birmingham

About the role

The new Network SIEM is essential to BT’s network security, meeting TSA requirements and improving our CAF level. Your role as a SIEM Application Engineer in Security Engineering is to support the development, implementation, operation and support of BTs Strategic SIEM development. We are seeking a skilled SIEM Security Engineer with expertise in SIEM and Security logging and monitoring to join our dynamic team. As a SIEM engineer, you will play a critical role in designing, developing, and maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture.

The role is hybrid (3 days in office) & based in Birmingham

What you’ll be doing

Data Ingestion and Enrichment

• Collaborate with Security analysts and application teams to provide clear design for the security scope of data ingestion.
• Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka
• Enhance data enrichment by integrating threat intelligence feeds and contextual information.
• Ingest data from various networking equipment, servers, firewalls and security appliances across multiple vendors.

SIEM Solution Development

• Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch.
• Continuously improving threat detection capabilities by tuning and optimising existing use cases and retiring use cases no longer providing value.

Query Optimization and Performance Tuning

• Designing, implementing and managing security detection use cases across a range of technologies to ensure timely alerting of security events and incidents to Security Operations staff.
• Monitor and manage the performance of the SIEM infrastructure.

Security Engineering

• Contribute to security engineering projects, transitions, and transformations.
• Work closely with security operations and associated security incident response systems
• Stay informed about emerging threats and security best practices.

Essential Skills / Experience

• Proven experience in SIEM Detection Engineering.
• Experience using cyber security technologies such as NGFW, SIEM, Proxies, IAM solutions
• Experience of tuning security detection use cases. Experience with log source onboarding and normalisation
• Strong analytical and troubleshooting skills with the ability to investigate complex security events.
• Understanding of MITRE ATT&CK and modern cyber threat techniques.
• Experience working with Security Operations and engineering stakeholders.
• Excellent technical documentation and communication skills.
• Bachelor’s/Master’s degree in Computer Science, Information Systems, Engineering, or other related fields 5+ years of engineering experience in delivering cybersecurity solutions
• Experience in key cyber technologies such as SIEM technologies (Elastic preferred), vulnerability management, access management and other commonly used Enterprise security controls. Ideally from both a development and operational perspective

Desirable Skills / Experience

• SIEM implementation and usage Experience of Elastic Stack (ELK)
• Knowledge of Offensive testing frameworks
• Knowledge of Linux, Windows and Network Administration
• Knowledge and experience of cloud services (public or private), OpenStack and K8S
• Cyber security qualifications
• Knowledge of Git and Devops practices
• Knowledge of Terraform/Ansible systems
• Strong knowledge of security policy/regulatory frameworks including Telecoms Security Act (TSA)

Our Package

• 10% on target annual bonus
• Access to an online private GP 24/7 for you and your immediate family
• Market-leading paid carers leave with up to 2 weeks off
• Equalised maternity, paternity, and adoption leave – 18 weeks’ full pay and 8 weeks’ half pay
• Discounted EE and BT products, including mobile and broadband
• Market leading Pension scheme – 5% from you and 10% from us
• Holiday purchase scheme

You can select additional benefits, including healthcare, dental, gym memberships and more when you’re ready.

BT Group is the UK’s leading communications group and the holding company behind some of the country’s most recognised brands – including BT, EE, Openreach and Plusnet. Our purpose is as simple as it is ambitious: we connect for good. Our customers include consumers, small, medium and large businesses, public sector organisations and other communications providers.

BT Group’s role is about setting direction, unlocking value and creating the conditions for our brands and businesses to thrive.

Having come through the most capital-intensive phase of our fibre investment, our focus now is on what comes next – simplifying how we operate, using technology and AI to work smarter, and organising ourselves to serve customers better and grow sustainably. Group teams shape strategy, policy, brand, capital allocation and transformation, helping the whole organisation perform at its best.

We have a singular culture that unites all our people: we are customer-first challengers, who are committed, clear and connected. These behaviours unite us as one team to deliver for our colleagues, our customers, our stakeholders and the country. Joining BT Group means working at the heart of a business that matters to the UK, with the opportunity to shape decisions, influence outcomes and help set the future course of one of the country’s most important companies.