Security Engineer
You will work with SIEM platforms (Splunk, Microsoft Sentinel, QRadar, Elastic, LogRhythm, ArcSight, Exabeam), SOAR tools, and scripting (Python, PowerShell). You will enhance and mature a global professional-services firm's security monitoring platform by onboarding log sources, developing detection use cases, and supporting incident response.
Free Tailor for ATS: 10/10 runs left
Security Engineer (SIEM) – 6 Month Fixed-Term Contract
We are a leading international professional services organisation with a strong global presence across Europe, the Americas, the Middle East and Asia. We provide specialist advisory services to multinational organisations, financial institutions and investment firms, operating within highly regulated environments.
We are seeking an experienced Security Engineer (SIEM) to join our Information Security Operations team on a 6-month fixed-term contract. This role will play a key part in enhancing and maturing our security monitoring and detection capabilities.
The Role
As a Security Engineer, you will focus on strengthening and optimising our Security Information and Event Management (SIEM) platform. You will be responsible for onboarding new log sources, improving data pipelines, developing advanced detection use cases, and supporting incident response activities.
This is an excellent opportunity for a security professional who enjoys building scalable, high-performing security monitoring environments and working in a collaborative, fast-paced setting.
You will report to the Information Security Operations Manager and work closely with the wider security team and internal stakeholders to improve the organisation’s overall security posture.
Key Responsibilities
SIEM Engineering & Optimisation
Enhance and optimise the SIEM platform to improve performance, coverage, and detection accuracy
Assess SIEM architecture and recommend improvements across ingestion, parsing, correlation, and storage
Implement automation and orchestration (SOAR) to streamline security operations
Log Source Onboarding & Integration
Identify and onboard log sources across cloud, network, endpoint, identity, and application layers
Develop custom parsers, connectors, and ingestion workflows
Collaborate with internal teams and vendors to ensure high-quality telemetry
Detection Engineering
Design and implement detection use cases aligned to frameworks such as MITRE ATT&CK
Build and tune correlation rules, alerts, dashboards, and anomaly detections
Continuously improve detection quality and reduce false positives
SOC & Incident Response Support
Partner with SOC analysts to refine detection logic
Support investigations through advanced SIEM querying and data analysis
Provide subject matter expertise during complex security incidents
Documentation & Governance
Maintain clear documentation of SIEM architecture, data models, and detection logic
Ensure alignment with internal policies, compliance requirements, and industry standards
Skills & Experience
Technical Expertise
Strong hands-on experience with SIEM platforms (e.g. Splunk, Microsoft Sentinel, QRadar, Elastic, LogRhythm, ArcSight, Exabeam)
Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs)
Experience in detection engineering, threat modelling, and attacker behaviour analysis
Familiarity with SOAR tools and automation workflows
Security Knowledge
Understanding of networks, Windows/Linux systems, cloud platforms (Azure, AWS, GCP), identity systems, and endpoint security tools
Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies
Essential Requirements
Degree (or equivalent experience) in a computing or related discipline
Proven experience across IT infrastructure and information security
Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/SC-100, CompTIA Security certifications)
Strong scripting skills (Python, PowerShell, or similar)
Excellent communication skills with the ability to engage stakeholders at all levels
Proactive, self-starting approach with strong problem-solving ability
Desirable Experience
Data Loss Prevention (DLP)
Network security and secure remote access solutions
Cloud and software-defined environments (SaaS, IaaS, PaaS, DaaS)
Cyber threat intelligence and open-source intelligence tools
Disaster recovery and business continuity planning
Knowledge of data privacy regulations
Additional Information
Some out-of-hours work may be required for planned changes or security incidents
Opportunity to contribute to strategic security initiatives and service improvements
If you are a motivated Security Engineer looking to make a tangible impact within a global, highly regulated environment, we would love to hear from you.