
SIEM Engineer
- Wokingham, Berkshire
- Contract
- Full-time
- SIEM Deployment & Management - Set up, configure, and maintain SIEM tools like Sentinel, Elastic, ArcSight, Splunk, or QRadar.
- DR deployment, configuration & management - experience with tools like Tanium, Trellix, FireEye, Defender, Elastic EDR
- Threat Detection & Analysis - Monitor security logs, detect anomalies, and investigate potential threats.
- Incident Response - Assist analysts to analyze and mitigate security incidents & have a good understanding of SOC function
- OOTB & Custom log ingestion Creation - Deploy OOTB integrations as well as develop & deploy custom integrations for various log source types.
- Security Reporting - Generate reports on security events, trends, and system performance.
- Collaboration - Work with IT and security teams to improve overall cybersecurity posture.
- Required Skills & Qualifications
- Technical Expertise - Strong knowledge & experience in security engineering with SIEM & EDR platforms, network security, and understanding of cybersecurity frameworks.
- Certifications - CISSP, CEH, GIAC, or vendor-specific SIEM certifications.
- Programming & Scripting - Familiarity with Python, PowerShell, KQL (Kusto query language), KQL (Kibana Query Language) or other scripting languages.
- Analytical Thinking & problem solving - Ability to analyze large datasets and identify threats, mitigations, misconfigurations, etc.
- Communication Skills - Ability to document findings and communicate effectively with stakeholders