SIEM Engineer in Newport, Wales

Dedicated to sustainable development, Arup is a collective of designers, consultants and experts working globally. At Arup you will have the opportunity to collaborate on ambitious projects - delivering remarkable outcomes for clients and communities, and to do socially useful work that has meaning. Arup's purpose, shared values and collaborative approach has set it apart for over 75 years, and now is your opportunity to join.

AMS is a global workforce solutions partner committed to creating inclusive, dynamic, and future-ready workplaces. We help organisations adapt, grow, and thrive in an ever-evolving world by building, shaping, and optimising diverse talent strategies. We partner with Arup to support their contingent recruitment processes. Acting as an extension of their recruitment teams, we connect them with skilled interim and temporary professionals, fostering workplaces where everyone can contribute and succeed.

On behalf of Arup, we are looking for a SIEM Engineer for a 12 month contract based in Cardiff with remote work available.

Purpose of the role: We're looking for an experienced SIEM Engineer to play a key role in a large scale cybersecurity transformation programme, migrating security monitoring capabilities from Rapid7 to Microsoft Sentinel. This is a hands-on engineering role focused on SIEM migration, log source onboarding, detection engineering, and the optimisation of security monitoring across a complex enterprise environment with over 1,000 systems.

What you'll do:

• Lead the migration of security monitoring capabilities from Rapid7 to Microsoft Sentinel.
• Transform, normalise, harmonise, and import security log data into Sentinel.
• Onboard and integrate a large volume of log sources across the estate.
• Recreate and optimise detection rules, analytics, and use cases within Microsoft Sentinel.
• Build, tune, and maintain alerts to improve threat detection and reduce false positives.
• Support the design and implementation of scalable SIEM monitoring capabilities.
• Work closely with security operations and engineering teams to ensure a smooth migration and transition.

The skills you'll need:

• Proven experience working as a SIEM Engineer, Cyber Security Engineer, or Security Monitoring Engineer.
• Previous SIEM migration experience, particularly migrations from Rapid7, Splunk, QRadar, ArcSight, or similar platforms.
• Experience working within large, complex enterprise environments.
• Strong hands-on experience with Microsoft Sentinel.
• Experience onboarding and integrating security log sources.
• Knowledge of log transformation, normalisation, and data ingestion processes.
• Experience creating, migrating, and tuning detection rules and alerts.
• Strong understanding of security monitoring, threat detection, and incident response.

Arup is an equal opportunity employer that actively promotes and nurtures a diverse and inclusive workforce. Guided by its values and alignment with the UN Sustainable Development Goals, Arup creates and contributes to equitable spaces and systems, while cultivating a sense of belonging for all. Arup's internal employee networks support their inclusive culture: from race, ethnicity and cross-cultural working to gender equity and LGBTQ+ and disability inclusion - creating a space for everyone to express themselves and make a positive difference.

If you are interested in applying for this position and meet the criteria outlined above, please click the link to apply and speak to one of our Sourcing Specialists. AMS are committed to providing all our candidates with the opportunity to perform at their best throughout the recruitment process. Please let us know if you require any additional support or reasonable adjustments during the screening process and we will work with you and Arup to identify the best solution to meet your requirements.