SIEM Engineer

SIEM Engineer (Splunk / Elastic)
Hemel Hempstead Hybryd 4 days on site | Up to £65,000
British nationals, security cleared to a high level required (DV eligible role)
Want to be more than just another SOC engineer?
I'm working with a growing cyber security team looking for a hands-on Splunk SIEM Engineer to help build, optimise and enhance security monitoring capabilities across complex and secure environments.
 
This is a role for someone who enjoys getting under the hood of Splunk – designing detections, improving data quality, onboarding log sources, reducing alert noise and helping security teams get real value from their SIEM platform.
You'll be working with Splunk Enterprise, Splunk ES and Elastic Security, helping to improve detection capability, automate processes and strengthen security operations.
 
What we're looking for:

• Strong Splunk Enterprise / Splunk ES experience
• Detection engineering and SIEM content development
• Experience with log ingestion, parsing and data pipelines
• Strong SPL skills
• MITRE ATT&CK knowledge
• Experience tuning alerts and reducing false positives
• Automation, scripting or Infrastructure as Code experience

This is a permanent role based in Hemel Hempstead, with 4 days per week onsite. There is also an out-of-hours call-out rota as part of the wider team.
 
If you're a Splunk-focused SIEM professional who enjoys building better detections rather than simply responding to them, I'd be keen to speak with you.