SIEM Application Engineer

SIEM Application Engineer

Location: Birmingham | Hours: Full-time

Our client, a large global technology organisation, is seeking an experienced contract (inside IR35) SIEM Application Engineer to design, deploy, and optimize Elastic SIEM solutions built on ECK, enhancing threat detection and security monitoring. The role is based in Birmingham (3 days per week on-site) and is initially until the end of March, with likely extensions.

Key Responsibilities:

• Develop and maintain SIEM solutions using Elasticsearch and Elastic Stack (ELK).
• Create and optimize detection rules aligned with MITRE ATT&CK Framework.
• Fine-tune Elasticsearch queries, Logstash pipelines, and Kibana dashboards for performance and visualization.
• Ensure security compliance, access controls, and encryption using Elastic Security features.

Skills & Experience:

• 5+ years in cybersecurity engineering and delivery.
• Strong expertise in SIEM technologies (Elastic preferred).
• Proficiency in Elasticsearch, Logstash, Kibana, and detection rule development.
• Knowledge of security policy/regulatory frameworks.
• Degree in Computer Science, Information Systems, or related field.

Desirable:

• Experience with DevOps practices, Git, Terraform, and Ansible.
• Familiarity with cloud services (public/private), OpenStack, Kubernetes.
• Cybersecurity certifications and knowledge of offensive testing frameworks.

Please forward your CV in the first instance for more information on this role.