Cybersecurity Engineer
A security operations programme needs a hands-on engineer to integrate SIEM and log analytics capabilities into the heart of its detection and response model. The mission is to make log data reliable, searchable and useful for analysts who protect a complex, high-stakes environment.
CONTEXT
Our client, a major player in its sector, is strengthening its security operations centre and SecOps team with a more integrated, data-driven view of what is happening across its systems. The organisation is integrating a SIEM and log analytics solution, and the project team needs an engineer who can move beyond theory and make the platform work in daily security operations. Log sources are diverse, data volumes are growing, and analysts need fast answers rather than raw noise. The role sits between architecture, project management and hands-on engineering, turning integration plans into configurations, pipelines, queries and dashboards that the SOC can rely on.
ACTIVITIES
- Support the integration of log data into the SIEM and log analytics platform.
- Configure, modify and tune the SIEM and log analytics tools based on operational and security requirements.
- Work closely with the security architect and project manager to translate design decisions into concrete engineering work.
- Help onboard new log sources, validate data quality and ensure ingestion reliability.
- Build queries, alerts, dashboards and reports that improve visibility for SOC and SecOps analysts.
- Document configurations, integration steps and troubleshooting guidance for operational teams.
- Support investigations by improving data completeness, normalisation and search performance.
EXPECTED ACHIEVEMENTS
The SOC and SecOps team should gain a more dependable integration between log sources and analytics capabilities, with cleaner data, faster searches and stronger detection coverage. Analysts should spend less time chasing missing or malformed logs and more time investigating real threats. The project should move from a collection of technical integrations to an operational capability that supports monitoring, incident response and continuous improvement across the security estate.
ENVIRONMENT
A security operations context centred on SIEM, log analytics, SOC workflows and SecOps collaboration. The environment includes log ingestion pipelines, parsers, normalisation, queries, dashboards, alerting and data quality checks. Engineers work with security architects, project managers, SOC analysts and platform teams, using structured integration methods, documentation and troubleshooting practices. The culture values precision, curiosity, security-minded engineering and the ability to make complex data useful under operational pressure.