Security Engineer SIEM

CYBERSECURITY ENGINEER – SIEM

We are seeking a highly motivated and experienced SIEM Security Engineer with CrowdStrike next generation technology experience to join a growing security team. You will play a crucial role in detecting, analysing, and responding to security threats, ensuring the confidentiality, integrity, and availability of our critical systems and data.

Responsibilities:

1. Design, implement, and maintain the SIEM platform (e.g., Splunk, QRadar, Azure Sentinel, etc.), including log ingestion, parsing, correlation, and reporting.
2. Develop and customise SIEM rules, dashboards, and reports detecting and alert on security incidents and anomalies.
3. Develop and follow a DevOps lifecycle, standardising a route to live or all Security engineering development.
4. Integrate various security tools and data sources with the SIEM platform.
5. Monitor the SIEM platform for performance and health, ensuring its availability and scalability.
6. Investigate and analyse security alerts and incidents, escalating as necessary.
7. Collaborate with other security team members and IT staff to improve security posture and incident response capabilities.
8. Strong experience with ISO27001 – NIST – CIS Top20 – DevOps – CI/CD – AppSec – ProdSec.
9. Automate security tasks and processes using scripting languages (e.g., Python, Bash).
10. Stay up to date with the latest security threats, vulnerabilities, and technologies.
11. Work closely with the SOC teams to manage detection and response.
12. Document SIEM configurations, processes, and procedures.
13. Participate in security audits and compliance assessments.
14. Provide support and training to other team members on the use of the SIEM platform.
15. Contribute to the development and implementation of security best practices.

Qualifications:
Bachelor’s degree in computer science, Information Security, or a related field preferred.

1. Deep understanding of SIEM technologies and their applications.
2. Strong knowledge of security concepts, including network security, endpoint security, vulnerability management, and incident response.
3. Experience with log management and analysis.
4. Proficiency in scripting languages (e.g., Python, Bash) is highly desirable.
5. Excellent analytical and problem-solving skills.
6. Strong communication and collaboration skills.
7. Security certifications (e.g., Security+, CISSP, GSEC) are a plus.

What you’ll get in return:
Flexible working options are available.

#J-18808-Ljbffr