> Markdown version of [/jobs/ext/4054307-siem-engineer](https://www.wearedevelopers.com/jobs/ext/4054307-siem-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM Engineer

- **Company:** Hays plc
- **Location:** London, UK (Remote available)
- **Experience:** Expert
- **Salary:** £51,764.0
- **Contract:** Temporary contract
- **Skills:** Application Programming Interfaces (APIs), Python (Programming Language), Routing, Security Information and Event Management, Data Logging, Scripting, Data Ingestion, QRadar, Splunk, Api Management
- **Published:** October 14, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5928851196

## About the Role

* Strong hands-on Splunk implementation and engineering experience
 * Splunk administration, operations, and monitoring experience
 * Hands-on IBM QRadar experience
 * Experience supporting SOC environments and security incident management
 * Experience developing and tuning SIEM security use cases or detection content
 * Experience with log ingestion, log routing, or SIEM data onboarding
 * Ability to work at a senior technical level across implementation and BAU operational support
 * Desirable: experience with Fluent Bit, particularly routing logs into Splunk
 * Desirable: API integration experience, ideally involving Expel
 * Desirable: Python scripting experience

## Description

* Support the implementation, configuration, and ongoing operation of Splunk
 * Provide Splunk administration, engineering, operational monitoring, and platform support
 * Work with Splunk and QRadar in the client security environment
 * Support SOC operations and incident management activities
 * Develop security use cases and tune existing content to improve operational effectiveness
 * Repoint log flows from Fluent Bit into Splunk
 * Support API integrations into Expel
 * Troubleshoot SIEM, logging, and integration issues as part of the wider security engineering function

Technologies:

 * API
 * IBM
 * Incident Management
 * Support
 * Python
 * Security
 * Splunk