SIEM Security Engineer

SIEM Security Engineer Contract - UK wide, with flexibility across multiple office sites, Hybrid Working (3 Days per week on site), Paying up to £558 Per Day, Inside IR35, Contract until March 2027


Your new role

We are looking for an experienced SIEM Security Engineer to join a major long-term security programme, supporting the continued development and maturity of an established SIEM platform.

This is not a greenfield implementation. You'll focus on expanding data ingestion, developing detection use cases, improving monitoring and optimising the existing SIEM capability.

Key Responsibilities:

• Onboard and normalise new security log/data sources
• Develop SIEM detection rules, alerts and use cases
• Configure data ingestion using Elasticsearch and Kafka
• Optimise Elasticsearch queries and SIEM performance
• Support automation and deployment through DevOps practices
• Work closely with Security Operations and Engineering teams

You will need experience in the following:

• Strong hands-on SIEM engineering experience
• Elasticsearch, Logstash and Kibana (ELK)
• Log ingestion, onboarding and normalisation
• SIEM detection engineering
• Kafka
• Git / GitLab and DevOps experience
• Knowledge of Kubernetes, Ansible, YAML, Helm or ArgoCD
• Linux and networking knowledge

What you need to do now


If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.

If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career.

Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk