SIEM Security Engineer
Hays
SIEM Security Engineer Contract - UK wide, with flexibility across multiple office sites, Hybrid Working (3 Days per week on site), Paying up to £558 Per Day, Inside IR35, Contract until March 2027
Your new role
We are looking for an experienced SIEM Security Engineer to join a major long-term security programme, supporting the continued development and maturity of an established SIEM platform.
This is not a greenfield implementation. You'll focus on expanding data ingestion, developing detection use cases, improving monitoring and optimising the existing SIEM capability.
Key Responsibilities:
Onboard and normalise new security log/data sources Develop SIEM detection rules, alerts and use cases Configure data ingestion using Elasticsearch and Kafka Optimise Elasticsearch queries and SIEM performance Support automation and deployment through DevOps practices Work closely with Security Operations and Engineering teams
You will need experience in the following:
Strong hands-on SIEM engineering experience Elasticsearch, Logstash and Kibana (ELK) Log ingestion, onboarding and normalisation SIEM detection engineering Kafka Git / GitLab and DevOps experience Knowledge of Kubernetes, Ansible, YAML, Helm or ArgoCD Linux and networking knowledge
What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
TPBN1_UKTJ
Your new role
We are looking for an experienced SIEM Security Engineer to join a major long-term security programme, supporting the continued development and maturity of an established SIEM platform.
This is not a greenfield implementation. You'll focus on expanding data ingestion, developing detection use cases, improving monitoring and optimising the existing SIEM capability.
Key Responsibilities:
Onboard and normalise new security log/data sources Develop SIEM detection rules, alerts and use cases Configure data ingestion using Elasticsearch and Kafka Optimise Elasticsearch queries and SIEM performance Support automation and deployment through DevOps practices Work closely with Security Operations and Engineering teams
You will need experience in the following:
Strong hands-on SIEM engineering experience Elasticsearch, Logstash and Kibana (ELK) Log ingestion, onboarding and normalisation SIEM detection engineering Kafka Git / GitLab and DevOps experience Knowledge of Kubernetes, Ansible, YAML, Helm or ArgoCD Linux and networking knowledge
What you need to do now
If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.
If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
TPBN1_UKTJ
Reference: WJ-5784_79099 · Posted 09 Nov 2026, 06:50 PM