SIEM Engineer

• Support the implementation, configuration, and ongoing operation of Splunk
• Provide Splunk administration, engineering, operational monitoring, and platform support
• Work with Splunk and QRadar in the client security environment
• Support SOC operations and incident management activities
• Develop security use cases and tune existing content to improve operational effectiveness
• Repoint log flows from Fluent Bit into Splunk
• Support API integrations into Expel
• Troubleshoot SIEM, logging, and integration issues as part of the wider security engineering function

Technologies:

• API
• IBM
• Incident Management
• Support
• Python
• Security
• Splunk

• Strong hands-on Splunk implementation and engineering experience
• Splunk administration, operations, and monitoring experience
• Hands-on IBM QRadar experience
• Experience supporting SOC environments and security incident management
• Experience developing and tuning SIEM security use cases or detection content
• Experience with log ingestion, log routing, or SIEM data onboarding
• Ability to work at a senior technical level across implementation and BAU operational support
• Desirable: experience with Fluent Bit, particularly routing logs into Splunk
• Desirable: API integration experience, ideally involving Expel
• Desirable: Python scripting experience

We are recruiting for a senior security engineer to support a client engagement with a known organisation. The role is remote, with occasional travel to the London office, and combines SIEM engineering with operational security support. It is an initial six-month contract, paid at £600 per day inside the scope of IR35. We are Hays Specialist Recruitment Limited, acting as an employment agency for permanent recruitment and an employment business supplying temporary workers.