Sentinel SEIM Engineer

SIEM Engineer (Security Cleared)

United Kingdom (Must hold active Security Clearance)

Contract / Permanent

We are seeking an experienced Security Information & Event Monitoring (SIEM) Engineer with active Security Clearance to join our cybersecurity team. The ideal candidate will be responsible for maintaining, developing, and optimizing the SIEM platform — ensuring effective log management, threat detection, and automation across complex IT and OT environments.

• Manage, maintain, and enhance the SIEM platform ensuring optimal performance and scalability.
• Onboard and integrate new log sources, create custom parsers, and develop analytic rules.
• Design and maintain detection rulesets, scope, plan, and track log integrations.
• Develop automation for alert triage and incident remediation through SOAR tools.
• Collaborate with Threat Detection & Response teams to ensure the SIEM platform aligns with security monitoring requirements.
• Participate in infrastructure projects and security tool integrations.
• Lead and mentor junior SIEM engineers, fostering a culture of continuous improvement.

• Active UK Security Clearance – Essential.
• Proven hands-on experience as a SIEM Engineer.
• Strong understanding of security log management across multiple domains (identity, access, network, systems, cloud, and applications).
• Proficiency in Python and/or PowerShell for data analysis and automation.
• Experience with SOAR platforms and security automation workflows.
• Excellent problem-solving, stakeholder management, and collaboration skills.
• Team leadership or mentoring experience is highly desirable.

• Splunk, QRadar, LogRhythm, Sentinel, ArcSight, Elastic, or similar SIEM tools.
• Familiarity with EDR, IDS/IPS, firewalls, and other security infrastructure.
• Exposure to both IT and OT (Operational Technology) environments.