Security Engineer (SIEM) – 6 Month Fixed-Term Contract

About the role

We are looking for an experienced Security Engineer (SIEM) to join our Information Security Operations team on a 6‑month fixed‑term contract in London. The role focuses on enhancing our SIEM platform, onboarding new log sources and supporting incident response to improve the organisation’s security posture.

Key responsibilities

• Enhance and optimise the SIEM architecture, including ingestion, parsing, correlation and storage.
• Onboard and integrate log sources from cloud, network, endpoint, identity and application layers, creating custom parsers and connectors.
• Design, develop and tune detection use cases, correlation rules, alerts, dashboards and anomaly models aligned with MITRE ATT&CK.
• Implement automation and orchestration (SOAR) to streamline security operations.
• Support SOC analysts with advanced SIEM queries, data analysis and incident investigations.
• Maintain comprehensive documentation of SIEM architecture, data models and detection logic in line with compliance standards.

Required profile

• Proven experience as a Security Engineer working with SIEM platforms.
• Strong background in security monitoring, detection engineering and incident response.
• Ability to work collaboratively with security teams and internal stakeholders in a fast‑paced environment.

Required skills

• SIEM platform expertise (e.g., Splunk, QRadar, Elastic).
• SOAR automation and orchestration.
• MITRE ATT&CK framework knowledge.
• Custom parser and connector development.
• Correlation rule and alert creation.
• Dashboard and reporting design.
• Advanced SIEM querying and data analysis.