Trust In SODA
SIEM Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
SIEM Engineer (SC Cleared Contractor)
Rate: Up to £700/day Insire IR35
Clearance: Active SC Clearance (Essential)
Location: Hybrid, Hampshire
Contract: Initial 6 Months with potential extension
Specialist SIEM Engineer
Specialist SIEM Engineer needed to develop, optimise and automate SSE's Microsoft Sentinel platform, supporting security monitoring, detection engineering and Project Amur/ECAF compliance.
Scope
- Onboard and integrate log sources into Sentinel; build custom parsers and data transformations
- Design and optimise KQL queries; build and tune analytic rules and detection logic
- Develop Logic Apps/SOAR workflows to automate response
- Implement CI/CD pipelines (Azure DevOps/Git) for SIEM content deployment
- Automate deployment/config across environments; tune detections to reduce false positives
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Key Skills
- Active SC Clearance (Essential)
- Strong Microsoft Sentinel engineering, administration and optimisation experience
- Log source onboarding, custom parsers and data normalisation
- Advanced KQL development and optimisation
- Analytic rule/detection logic design and tuning
- Logic Apps, Playbooks and SOAR automation
- Azure DevOps/Git CI/CD pipeline implementation
- Strong grounding in security monitoring, incident response and threat hunting
- Strong troubleshooting and root cause analysis skills
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Desirable
- SANS SEC503 – Network Monitoring and Threat Detection
Candidates must hold active, valid SC Clearance.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills