SOC SIEM Engineer

My client, a leading IT Security focused Managed Services Provider is looking to hire a new SIEM focused SOC Engineer for a 6 month project based in Birmingham.

The primary function of the Senior SOC Engineer is to enhance our security operations capabilities. This role requires deep expertise in SIEM platforms, including Splunk, IBM QRadar, Microsoft Defender, Microsoft Sentinel, and Google Chronicle, with a strong focus on playbook development, analytical rule creation, and threat modelling. You will be instrumental in building and optimizing our detection and response strategies.

Job Duties

• SIEM Engineering & Management
  • Deploy, configure, and maintain SIEM platforms (Splunk, QRadar, Sentinel, Defender, Chronicle).
  • Onboard and normalize log sources across cloud and on-prem environments.
  • Develop and optimize analytical rules for threat detection, anomaly detection, and behavioural analysis.

Skills

• Must be able to obtain SC Clearance or already hold SC clearance.
• SIEM Expertise: Hands-on experience with at least two of the following:
  • Splunk
  • IBM QRadar
  • Microsoft Defender for Endpoint
  • Microsoft Sentinel
  • Google Chronicle
• Technical Skills:
  • Strong knowledge of log formats, parsing, and normalization.
  • Experience with KQL, SPL, AQL, or other SIEM query languages.
  • Familiarity with scripting (Python, PowerShell) for automation and enrichment.

• Minimum of 3 to 5 years of experience in the IT security industry, preferably working in a SOC/NOC environment.
• Preferably holds Cyber Security Certification, e.g., ISC2 CISSP, GIAC, SC-200, Splunk Certified Admin/Power User, IBM QRadar

Please send your details and CV through to (url removed) if you are interested in discussing this further.

Disclaimer:

This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.