SC SIEM Engineer CGEMJP

Role Title: SIEM Engineer

Duration: contract to run until 31/03/2025

Location: Wokingham, Hybrid 2 days onsite

Rate:

Clearance required: Active SC is essential

Role purpose / summary

• SIEM Deployment & Management - Set up, configure, and maintain SIEM tools like ArcSight, Splunk, or QRadar.
• Threat Detection & Analysis - Monitor security logs, detect anomalies, and investigate potential threats.
• Incident Response - Work with security teams to analyze and mitigate security incidents.
• Custom Rule Creation - Develop and fine-tune detection rules and alerts to identify malicious activities.
• Security Reporting - Generate reports on security events, trends, and system performance.
• Collaboration - Work with IT and security teams to improve overall cybersecurity posture.

Required Skills & Qualifications

• Technical Expertise - Strong knowledge of SIEM platforms, network security, and cybersecurity frameworks.
• Certifications - CISSP, CEH, GIAC, or vendor-specific SIEM certifications.
• Programming & Scripting - Familiarity with Python, PowerShell, or other scripting languages.
• Analytical Thinking - Ability to analyze large datasets and identify security threats.
• Communication Skills - Ability to document findings and communicate effectively with stakeholders

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!