SIEM Engineer
SIEM Engineer - (Havant/Reading/Hybrid) - Inside IR35
Day Rate - up to £700
Duration - 6 months
Harvey Nash's Client have a requirement for a SIEM Engineer, you must be SC Cleared to commence this post.
You will support the team in:
- Lead onboarding and integration of log sources into Microsoft Sentinel to ensure complete and reliable security telemetry
- Develop custom parsers and data transformations to normalise and enrich ingested data
- Design and optimise KQL queries to support effective threat detection and investigation
- Create and maintain analytic rules and detection logic aligned to emerging threats and business use cases
- Develop Logic Apps and SOAR workflows to automate response and reduce manual effort
- Implement CI/CD pipelines (Azure DevOps/Git) to support controlled deployment of SIEM content (rules, parsers, playbooks)
- Automate deployment and configuration across environments to improve consistency and speed of delivery
- Perform ongoing tuning and optimisation of detections to improve fidelity and reduce false positives