Security Engineer

Security Engineer – SIEM / QRadar – 6-month contract – London/remote

Overview

My Client is seeking a hands-on Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future migration to Splunk.

Key Responsibilities of the Security Engineer

• Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts.
• Review and optimise detection use cases to improve threat visibility and reduce false positives.
• Configure and maintain log collection, parsing, normalisation and aggregation.
• Support log aggregation using Fluentd, Cribl or similar technologies.
• Ensure relevant security logs are accurately ingested and available to the third-party SOC.
• Troubleshoot log ingestion, parsing and SIEM detection issues.
• Identify opportunities to improve SIEM coverage, logging quality and detection capabilities.
• Support planning and potential migration from QRadar to Splunk.

Essential Skills & Experience from the Security Engineer

• Strong hands-on experience with IBM QRadar SIEM.
• Experience developing, maintaining and...