SIEM Engineer

SIEM Content Engineer – National Security & Defence
Hybrid role -Hemel Hempstead (1 day/week on-site)
Clearance: Must hold or be eligible for DV

I have a great opportunity for a Skilled SIEM professional to work as a SIEM Content Engineer working for a leading consultancy’s Security Operations Centre (SOC) team. The role will be focused on Country Critical technology in the defence and national security space.

Key Responsibilities

1. Develop and maintain SIEM content (rules, dashboards, reports)
2. Analyse SIEM data to detect and respond to threats
3. Collaborate with SOC Analysts, Architects, and Engineers
4. Stay current on emerging threats and incorporate into detection logic
5. Support security standards and best practices

Requirements:

1. 3+ years with SIEM tools (Splunk, Sentinel, QRadar)
2. Strong understanding of security protocols and frameworks (NIST, ISO, PCI DSS)
3. Scripting experience (Python, PowerShell, regex)
4. Excellent problem-solving and communication skills
5. Security certifications (CISSP, CISM, etc.) would be a plus.

This is a chance to take your SIEM skills to the next level and be part of a team that is helping to defend the country.