Harvey Nash
SIEM Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
SIEM Engineer – Sentinel – Reading
Inside IR35
Active SC Clearance – must have used in the last 12 Months
Remote working
6 Months
Day rate up to £700
Role Overview:
Seim Engineer to come on board to be Responsible for onboarding and integrating security log sources into Microsoft Sentinel, ensuring reliable and comprehensive security telemetry. Develop custom parsers and data transformations to normalise and enrich ingested data, and design and optimise KQL queries to support effective threat detection, monitoring, and security investigations.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Skills and Responsibilities:
Get help with your application
Your very own career expert that helps elevate your application to the next level.
- Integrate and onboard log sources into Microsoft Sentinel, ensuring reliable security telemetry.
- Develop custom parsers, data transformations, and KQL queries for threat detection and investigation.
- Create and maintain analytic rules and detection logic aligned to emerging threats and business requirements.
- Develop Logic Apps and SOAR workflows to automate security response.
- Implement CI/CD pipelines using Azure DevOps/Git for controlled SIEM content deployment.
- Automate SIEM configuration and deployments across environments.
- Continuously tune and optimise detections to improve accuracy and reduce false positives.
- Experience with LogRhythm, Check Point firewalls, and SIEM logging platforms.
- SEC503 / SANS certification or training would be highly desirable.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location