> Markdown version of [/jobs/ext/1913193-siem-security-engineer](https://www.wearedevelopers.com/jobs/ext/1913193-siem-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # SIEM Security Engineer - **Company:** BT Group - **Location:** Birmingham, UK - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Cyber Security, Information Systems, Linux, DevOps, Elasticsearch, Identity and Access Management, Intrusion Detection and Prevention, Network Security, Network Administration, OpenStack, Performance Tuning, Query Optimization, Cloud Services, Ansible, Security Information and Event Management, Software Vulnerability Management, Data Logging, Data Ingestion, Istio, Mitre Att&ck, Git, Kubernetes, Information Technology, Apache Kafka, Terraform, Microservices - **Published:** August 4, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=a0708fd81806e2ec ## About the Role * Proven experience in SIEM Detection Engineering. * Experience using cyber security technologies such as NGFW, Proxies, IAM solutions * Experience of tuning security detection use cases. * Experience with log source onboarding and normalisation * Strong analytical and troubleshooting skills with the ability to investigate complex security events. * Understanding of MITRE ATT&CK and modern cyber threat techniques. * Experience working with Security Operations and engineering stakeholders. * Excellent technical documentation and communication skills. * Bachelor's/Master's degree in Computer Science, Information Systems, Engineering, or other related fields * 5+ years of engineering experience in delivering cybersecurity solutions * Experience in key cyber technologies such as SIEM technologies (Elastic preferred), vulnerability management, access management and other commonly used Enterprise security controls. Ideally from both a development and operational perspective Desirable Skills / Experience * SIEM implementation and usage Experience of Elastic Stack (ELK) * Knowledge of Offensive testing frameworks * Knowledge of Linux, Windows and Network Administration * Knowledge and experience of cloud services (public or private), OpenStack and K8S * Cyber security qualifications * Knowledge of Telecoms Security Act (TSA) * Knowledge of architectural concepts such as microservices, service mesh. * Knowledge of Git and Devops practices * Knowledge of Terraform/Ansible systems * Strong knowledge of security policy/regulatory frameworks ## Description The new Network SIEM is essential to BT's network security, meeting TSA requirements and improving our CAF level. Your role as a SIEM Application Engineer in Security Engineering is to support the development, implementation, operation and support of BTs Strategic SIEM development., We are seeking a skilled SIEM Security Engineer with expertise in SIEM and Security logging and monitoring to join our dynamic team. As a SIEM engineer, you will play a critical role in designing, developing, and maintaining the ingestion of our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture., * Collaborate with Security analysts and application teams to provide clear design for the security scope of data ingestion. * Support the configuration of Elasticsearch pipelines for data ingestion from various sources, primarily from Kafka * Enhance data enrichment by integrating threat intelligence feeds and contextual information. SIEM Solution Development: * Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch. * Optimize SIEM rules, alerts, and dashboards for efficient threat detection. * Query Optimization and Performance Tuning: * Write efficient Elasticsearch queries to retrieve relevant security events. * Monitor and manage the performance of the SIEM infrastructure. Security Engineering: * Contribute to security engineering projects, transitions, and transformations. * Work closely with security operations and associated security incident response systems * Stay informed about emerging threats and security best practices. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Rate-limiting using eBPF and Istio: How to protect your SaaS customers from themselves](https://www.wearedevelopers.com/videos/100220-rate-limiting-using-ebpf-and-istio-how-to-protect-your-saas-customers-from-themselves) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) ## Related Articles - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Software Engineer Salary in The UK](https://www.wearedevelopers.com/magazine/231-software-engineer-salary-in-the-uk) - [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries) - [Fullstack Developer Salary UK](https://www.wearedevelopers.com/magazine/251-fullstack-developer-salary-uk)