Anson McCade
SIEM Engineer - Hybrid
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
A leading global technology and cyber organisation is building a new Security Operations Centre to support the cyber defence of a major international defence programme. The environment will span Microsoft Cloud services and on-premises data centres across multiple regions and classification levels, creating a technically challenging and highly significant cyber security programme.
The SIEM Engineer will support the design, deployment, configuration, and ongoing development of the SOC’s security monitoring capability. The role will work across technologies including Splunk, Microsoft Sentinel, SOAR, Microsoft XDR, and wider security tooling, with a major focus on SIEM engineering, data onboarding, integrations, detection content, and threat-led use cases.
What’s on offer
- Salary: £72,000 – £82,000
- 10% annual bonus
- Opportunity to help build a new enterprise-scale SOC from the ground up
- Hybrid working with customer-site attendance near Frimley approximately once every one to two weeks
- London and Frimley are ideal locations, with flexibility for candidates based elsewhere who can travel regularly
- Excellent benefits package
- Strong technical development and career progression opportunities
- Candidates must be eligible to obtain SC clearance
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What you need
- Strong experience designing, building, deploying, and operating SIEM and SOAR platforms
- Hands-on experience with Splunk and/or Microsoft Sentinel, ideally with strong exposure to both
- Experience with technologies such as Splunk Enterprise Security, Splunk SOAR, UBA, Elastic, or Microsoft XDR
- Proven experience deploying and configuring SIEM platforms across cloud and/or on-premises environments
- Experience supporting high-volume data ingestion environments
- Strong experience with log collection and onboarding data sources into a SIEM
- Ability to define and develop threat-led detection use cases, playbooks, and automation content
- Experience integrating SIEM platforms with identity management, vulnerability management, asset management, threat intelligence, and case management systems
- Strong knowledge of Azure and/or AWS security controls and detection capabilities
- Experience deploying security technologies across cloud, containerised, and virtual machine environments
- Strong understanding of enterprise ICT and security architecture
- Good networking knowledge, including TCP/IP, and the ability to identify normal and abnormal network traffic
- Detailed understanding of threat intelligence, threat actors, and TTPs
- Experience developing technical test procedures against functional and non-functional requirements
- Strong technical documentation and client-facing communication skills
Get help with your application
Your very own career expert that helps elevate your application to the next level.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location