SIEM Engineer

Job Title: SIEM Engineer
Location: Wokingham/Hybrid (3 days per week on site)
Duration: 3 months from the start
Rate: 430 per day inside ir35

SC security clearance is required for this role

We are looking for a highly skilled Security Engineer to support the deployment, configuration, and management of modern SIEM and EDR platforms. This role is ideal for someone with strong hands-on technical security expertise and a passion for threat detection, analysis, and automation.

Key Responsibilities:

• Syslog experience and/or strong Linux skills

SIEM Deployment & Management

• Configure, deploy, and maintain SIEM platforms such as Microsoft Sentinel or Elastic SIEM.
• Build and optimise log ingestion pipelines.

EDR Deployment & Management

• Manage and maintain tools including Tanium, Trellix, FireEye, Microsoft Defender, or Elastic EDR.

Threat Detection & Analysis

• Monitor security logs and alerts.
• Investigate anomalies, understand attack patterns, and provide actionable recommendations.

Syslog Management

• Configure and maintain Syslog servers.
• Manage Syslog feeds and ensure reliable log forwarding.

Log Ingestion for Sentinel

• Deploy out-of-the-box integrations.
• Develop custom connectors and ingestion methods for diverse log sources.

Collaboration

• Work closely with IT, SOC, and wider security teams to strengthen the organisation's cybersecurity posture.

Required Skills & Qualifications

• Strong background in security engineering, SIEM/EDR tooling, and network security.
• Certifications such as CISSP, CEH, GIAC, AZ-500, SC-100, or relevant vendor-specific credentials.
• Scripting proficiency in Python, PowerShell, KQL (Kusto Query Language), or Kibana Query Language.
• Strong analytical mindset with the ability to process large datasets, detect threats, and identify misconfigurations.
• Excellent written and verbal communication skills for documenting findings and engaging stakeholders.

If you are interested in this role please feel free to submit your CV

Many thanks,