Candidate MUST BE SECURITY CLEARED
As a Security Information & Event Monitoring (SIEM) Engineer, you are responsible for maintaining the SIEM platform. This includes onboarding log sources, creating custom parsers, developing analytic rules, creating automation for triage and remediation, and integrating with other Information Technology and Operational Technology SSE platforms at pace.
You will:
Develop the security monitoring platform, ensuring optimal performance, scalability, and integration with security tools.
Participate in infrastructure projects to develop, plan, and implement solutions for security monitoring.
Design, implement, and maintain detection rulesets. Scope, plan, and track log integrations.
Guide, develop, and grow the SIEM Engineering team.
Collaborate with the wider Threat Detection & Response team to ensure the SIEM platform meets their day-to-day needs and support incidents as necessary.
You have
Proven hands-on SIEM Engineering background.
Extensive experience working with security logs across multiple domains identity and access, network, system, data, application, cloud and multiple product types.
Proficiency in data analysis and scripting languages (e.g., PowerShell, Python).
Strong Security Orchestration, Automation and Response (SOAR) knowledge.
Team leadership experience with great collaboration and stakeholder management skills
JBRP1_UKTJ