SIEM Engineer

SIEM Engineer (SC Cleared Contractor) Rate: Up to £700/day Insire IR35 Clearance: Active SC Clearance (Essential) Location: Hybrid, Hampshire Contract: Initial 6 Months with potential extension Specialist SIEM Engineer needed to develop, optimise and automate SSE's Microsoft Sentinel platform, supporting security monitoring, detection engineering and Project Amur/ECAF compliance. ScopeOnboard and integrate log sources into Sentinel; build custom parsers and data transformationsDesign and optimise KQL queries; build and tune analytic rules and detection logicDevelop Logic Apps/SOAR workflows to automate responseImplement CI/CD pipelines (Azure DevOps/Git) for SIEM content deploymentAutomate deployment/config across environments; tune detections to reduce false positivesKey SkillsActive SC Clearance (Essential)Strong Microsoft Sentinel engineering, administration and optimisation experienceLog source onboarding, custom parsers and data normalisationAdvanced KQL development and
optimisationAnalytic rule/detection logic design and tuningLogic Apps, Playbooks and SOAR automationAzure DevOps/Git CI/CD pipeline implementationStrong grounding in security monitoring, incident response and threat huntingStrong troubleshooting and root cause analysis skillsDesirableSANS SEC503 - Network Monitoring and Threat DetectionCandidates must hold active, valid SC Clearance.