SIEM Engineer

SIEM Engineer (Splunk / Elastic)
Hemel Hempstead Hybryd 4 days on site | Up to £65,000
British nationals, security cleared to a high level required (DV eligible role)
Want to be more than just another SOC engineer?
I'm working with a growing cyber security team looking for a hands-on Splunk SIEM Engineer to help build, optimise and enhance security monitoring capabilities across complex and secure environments.

This is a role for someone who enjoys getting under the hood of Splunk – designing detections, improving data quality, onboarding log sources, reducing alert noise and helping security teams get real value from their SIEM platform.
You'll be working with Splunk Enterprise, Splunk ES and Elastic Security, helping to improve detection capability, automate processes and strengthen security operations.

What we're looking for:

Strong Splunk Enterprise / Splunk ES experience
Detection engineering and SIEM content development
Experience with log ingestion, parsing and data pipelines
Strong SPL skills
MITRE ATT&CK knowledge
Experience tuning alerts and reducing false positives
Automation, scripting or Infrastructure as Code experience
This is a permanent role based in Hemel Hempstead, with 4 days per week onsite. There is also an out-of-hours call-out rota as part of the wider team.

If you're a Splunk-focused SIEM professional who enjoys building better detections rather than simply responding to them, I'd be keen to speak with you