> Markdown version of [/jobs/ext/3725018-senior-it-security-engineer-siem](https://www.wearedevelopers.com/jobs/ext/3725018-senior-it-security-engineer-siem). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior IT Security Engineer - SIEM

- **Company:** Precise Placements
- **Location:** London, UK
- **Experience:** Expert
- **Salary:** £90,000.0
- **Contract:** Temporary contract
- **Skills:** Amazon Web Services, Data Analysis, Microsoft Azure, Cloud Computing, Cyber Security, Intrusion Detection and Prevention, JSON, Python (Programming Language), Windows PowerShell, ArcSight SIEM Tool, Cloud Services, Security Information and Event Management, Syslog, Systems Integration, Extensible Markup Language (XML), Mitre Att&ck, QRadar, Cyber Threat Analysis, Cybercrime, Microsoft Sentinel, Splunk, SentinelOne Expertise, Security Orchestration, Automation & Response
- **Published:** October 14, 2026
- **Apply:** https://www.careerboard.com/gb/en/find-jobs-in-United-Kingdom/-C3F4BD5C53587DE7AA/

## About the Role

* Strong hands-on experience administering and engineering enterprise SIEM platforms such as Microsoft Sentinel, Splunk, QRadar, LogRhythm, Exabeam, ArcSight or Elastic
 * Experience onboarding and integrating diverse log sources
 * Strong understanding of log formats including JSON, Syslog, XML and CEF
 * Experience building and tuning correlation rules, detections, searches and dashboards
 * Knowledge of SOAR technologies and security automation
 * Good understanding of infrastructure, networking, cloud platforms, endpoint security and identity technologies
 * Experience with Scripting and automation using Python and/or PowerShell
 * Strong understanding of cyber security frameworks including MITRE ATT&CK and threat hunting methodologies

Desirable Experience

 * Experience within highly regulated environments
 * Knowledge of Microsoft Defender and SentinelOne
 * Experience with DLP technologies
 * Exposure to cloud services including Azure, AWS or GCP
 * Threat intelligence and threat hunting experience
 * Relevant industry certifications such as SC-200, SC-100, CISSP, SSCP, GIAC or equivalent

## Description

A leading international professional services firm is seeking an experienced SOC Engineer to join its Information Security team on a 6-month fixed-term basis.

This is an excellent opportunity for a security professional with strong SIEM engineering expertise who enjoys building and enhancing security monitoring capabilities rather than purely operating within a traditional analyst function.

Working closely with the Information Security Operations Manager and wider security team, you will play a key role in driving the maturity of the organisation's SIEM platform, improving detection capabilities, onboarding new log sources, and supporting security operations across a global environment., * Enhance and optimise SIEM performance, coverage and detection capability

 * Onboard and integrate new log sources across cloud, infrastructure, endpoint, identity and application platforms
 * Develop and maintain parsers, connectors and ingestion workflows
 * Build, test and tune detection use cases aligned to MITRE ATT&CK methodologies
 * Create and improve correlation rules, dashboards and alerting mechanisms
 * Support SOC investigations through advanced querying, enrichment and data analysis
 * Implement automation and orchestration capabilities to improve incident response processes
 * Produce and maintain technical documentation relating to SIEM architecture, data models and detection content
 * Collaborate with internal technology teams and third-party vendors to improve security visibility and monitoring