Contract Elastic SIEM SME/Engineer, Outside IR35, £500 per day, Farnborough
Contract position at a Defence consultancy, outside IR35 for a specialist Security Engineer work
This is working amongst a team of other technology professionals on an MOD/Defence project, from Farnborough.
PLEASE NOTE - The nature of this project will require the work to be carried out onsite and successful candidates will be required to be security cleared (DV Level) prior to appointment.
Experienced Elastic SIEM Subject Matter Expert required to support NESTOR operations by building, tuning, and operating threat detection, log ingestion, and operational dashboards within Elastic. The role focuses on improving detection quality, investigating alerts, and collaborating closely with operational teams to deliver effective SIEM capabilities in constrained, mission-driven environments.
Experience required:
1. Strong hands-on experience with Elasticsearch, Kibana, and Elastic SIEM in operational environments
2. Proven experience developing, tuning, and optimising SIEM detection rules to identify threats and reduce false positives
3. Experience managing log ingestion pipelines and ensuring reliable data flow into Elasticsearch
4. Proficiency in log parsing, normalisation, and enrichment to support high-quality detections
5. Hands-on experience designing and maintaining Kibana dashboards for operational visibility