SIEM Engineer (SC Cleared Contractor)
Rate: Up to £700/day Insire IR35
Clearance: Active SC Clearance (Essential)
Location: Hybrid, Hampshire
Contract: Initial 6 Months with potential extension
Specialist SIEM Engineer needed to develop, optimise and automate SSE's Microsoft Sentinel platform, supporting security monitoring, detection engineering and Project Amur/ECAF compliance.
Scope
- Onboard and integrate log sources into Sentinel; build custom parsers and data transformations
- Design and optimise KQL queries; build and tune analytic rules and detection logic
- Develop Logic Apps/SOAR workflows to automate response
- Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment
- Automate deployment/config across environments; tune detections to reduce false positives
Key Skills
- Active SC Clearance (Essential)
- Strong Microsoft Sentinel engineering, administration and optimisation experience
- Log source onboarding, custom parsers and data normalisation
- Advanced KQL development and optimisation
- Analytic rule/detection logic design and tuning
- Logic Apps, Playbooks and SOAR automation
- Azure DevOps/Git CI/CD pipeline implementation
- Strong grounding in security monitoring, incident response and threat hunting
- Strong troubleshooting and root cause analysis skills
Desirable
- SANS SEC503 – Network Monitoring and Threat Detection
Candidates must hold active, valid SC Clearance.
#J-18808-Ljbffr
SIEM Engineer in Reading employer: Trust In SODA
As a leading employer in the tech industry, we offer a dynamic work environment that fosters innovation and collaboration. Our London office provides a hybrid working model, allowing for flexibility while being part of a vibrant team dedicated to delivering impactful solutions. We prioritise employee growth through continuous learning opportunities and support, making this an ideal place for professionals looking to advance their careers in solution architecture.
