SIEM Engineer

Job Title: SIEM Engineer (SC Cleared)Location: Reading/HavantDuration:6 monthsDescription:

\n
• Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry
\n
• Develop custom parsers and data transformations to normalise and enrich ingested data
\n
• Design and optimise KQL queries to support effective threat detection and investigation
\n
• Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases
\n
• Develop Logic Apps and SOAR workflows to automate response and reduce manual effort
\n
• Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks)
\n
• Automate deployment and configuration across environments to improve consistency and speed of delivery
\n
• Perform ongoing tuning and optimisation of detections to improve fidelity and reduce false positives
\n

Guidant, Carbon60, Lorien & SRG - The Impellam Group Portfolio are acting as an Employment Business in relation to this vacancy.