Lead SIEM Engineer Job at Fynity (Hemel Hempstead)

Lead SIEM Engineer

Are you ready to take the lead in shaping one of the most advanced SIEM environm...

Location

United Kingdom , Farnborough

Salary:

70000.00 - 75000.00 GBP / Year

Fynity

Expiration Date

Until further notice

Requirements

Strong hands-on experience leading SIEM engineering projects using platforms such as Splunk, Sentinel or QRadar
A deep understanding of cybersecurity frameworks and best practice (NIST, ISO, CIS, PCI DSS)
Scripting ability in Python, PowerShell and Regex for tuning and automation
Excellent communication skills and the ability to collaborate across teams and projects
DV Clearance must be eligible and willing to obtain

Job Responsibility

Leading the design, development and tuning of SIEM content – rules, dashboards, alerts and reports that spot threats fast
Acting as the technical authority on SIEM engineering, ensuring the platform runs efficiently and delivers real value
Working with SOC Analysts, Threat Hunters and Architects to enhance SIEM use cases and boost detection accuracy
Bringing new ideas and threat intelligence to evolve the SIEM strategy and stay ahead of emerging risks
Mentoring junior engineers, setting standards, and helping shape the future of SIEM operations

Fulltime

Solutions Engineering Lead

We are hiring a Solutions Engineering Team Lead for the East region to scale and...

Location

United States , Boston

Salary:

220000.00 - 300000.00 USD / Year

Coralogix

Expiration Date

Until further notice

Requirements

7+ years in customer-facing technical roles (Sales Engineering, Solutions Architecture or similar)
3+ years leading or managing pre-sales technical teams with a record of coaching success
Experience supporting or owning team-level quotas within a sales organization
Hands-on expertise with the following: Kibana, Grafana, Datadog, New Relic, Splunk, Honeycomb, Jaeger, OpenSearch
Proficiency crafting PromQL, Lucene and SQL queries for troubleshooting and dashboards
Deep knowledge of cloud services central to observability: AWS: EKS, Fargate, Lambda, CloudFormation, CloudWatch Logs and Metrics
Azure Monitor and equivalents in Google Operations Suite
Working knowledge of OpenTelemetry, modern DevOps and container platforms (Kubernetes, Docker)
Strong ability to communicate with engineers and C-level audiences alike

Job Responsibility

Own regional SE performance in partnership with Account Executives, ensuring quota attainment and deal velocity
Hire, onboard and mentor Solutions Engineers, setting clear KPIs and career paths
Maintain a strong personal presence with customers, modeling technical excellence and closing strategic opportunities
Improve processes for discovery, POC execution, documentation and knowledge sharing
Collaborate with Product, Support and Customer Success to shorten feedback loops and accelerate adoption
Architect and deploy reference designs for logs, metrics, traces, SIEM and Kubernetes monitoring across AWS, Azure and GCP
Lead white-board deep-dive sessions on ingestion pipelines, index-free querying and cost-optimized retention strategies
Provide escalation support during POCs: troubleshoot complex issues, analyze logs, traces, craft PromQL, Lucene or Dataprime queries and isolate root causes
Track technical success metrics such as POC win rate, onboarding time-to-value and validation scorecards, converting data insights into process improvements
Contribute code or scripts (Python, Go or Java) for custom exporters, automation and synthetic monitoring

What we offer

Comprehensive and inclusive employee benefits for healthcare, dental, and mental health benefits
401(k) plan and match
Paid sick time and paid time off

Fulltime

Solutions Engineering Lead

Coralogix is a modern full-stack observability platform that transforms how busi...

Location

United States , Dallas

Salary:

Not provided

Coralogix

Expiration Date

Until further notice

Requirements

7+ years in customer-facing technical roles (Sales Engineering, Solutions Architecture or similar)
3+ years leading or managing pre-sales technical teams with a record of coaching success
Experience supporting or owning team-level quotas within a sales organization
Hands-on expertise with the following: Kibana, Grafana, Datadog, New Relic, Splunk, Honeycomb, Jaeger, OpenSearch
Proficiency crafting PromQL, Lucene and SQL queries for troubleshooting and dashboards
Deep knowledge of cloud services central to observability: AWS: EKS, Fargate, Lambda, CloudFormation, CloudWatch Logs and Metrics
Azure Monitor and equivalents in Google Operations Suite
Working knowledge of OpenTelemetry, modern DevOps and container platforms (Kubernetes, Docker)
Strong ability to communicate with engineers and C-level audiences alike
Familiarity with structured sales methodologies such as MEDDPIC or Command of the Message (plus)

Job Responsibility

Own regional SE performance in partnership with Account Executives, ensuring quota attainment and deal velocity
Hire, onboard and mentor Solutions Engineers, setting clear KPIs and career paths
Maintain a strong personal presence with customers, modeling technical excellence and closing strategic opportunities
Improve processes for discovery, POC execution, documentation and knowledge sharing
Collaborate with Product, Support and Customer Success to shorten feedback loops and accelerate adoption
Architect and deploy reference designs for logs, metrics, traces, SIEM and Kubernetes monitoring across AWS, Azure and GCP
Lead white-board deep-dive sessions on ingestion pipelines, index-free querying and cost-optimized retention strategies
Provide escalation support during POCs: troubleshoot complex issues, analyze logs, traces, craft PromQL, Lucene or Dataprime queries and isolate root causes
Track technical success metrics such as POC win rate, onboarding time-to-value and validation scorecards, converting data insights into process improvements
Contribute code or scripts (Python, Go or Java) for custom exporters, automation and synthetic monitoring

What we offer

Comprehensive and inclusive employee benefits for healthcare, dental, and mental health benefits
A 401(k) plan and match
Paid sick time
Paid time off

Fulltime

Senior Logging & Detection Engineer

We are currently seeking a Senior Logging & Detection Engineer to lead the techn...

Location

Canada , Vancouver; Calgary; Toronto

Salary:

146200.00 - 197800.00 CAD / Year

Clio

Expiration Date

Until further notice

Requirements

Senior-level expertise building and scaling enterprise-grade detection capabilities and security monitoring systems
Expert-level query language proficiency in at least two of the following: Elasticsearch/Lucene, SQL, KQL (Kusto), or SPL (Splunk), demonstrating advanced optimization techniques
Extensive Detection Engineering experience owning the full lifecycle of rules, alerts, and automated response workflows within a SIEM/SOAR environment
Advanced log analysis skills across diverse, large-scale data sources, including multi-cloud logs (AWS, Azure, GCP), network flows, and advanced security tool outputs
Deep dashboard and visualization expertise with tools like Kibana, Grafana, or Tableau, specifically for security metrics and executive reporting
Proven expertise in leading threat hunting efforts using log data to proactively identify and track sophisticated threats and anomalous behavior across the environment
Senior-level scripting and automation abilities (Python/Go/PowerShell), used to build custom tools, manage APIs, and drive detection automation at scale
Architectural experience integrating and optimizing SIEM platforms, SOAR tools, and security orchestration systems
Expert performance optimization skills covering query tuning, index design, data partitioning, and overall resource-efficient analytics on big data
Significant incident response experience providing expert-level technical analysis and forensic support during major security incidents

Job Responsibility

Lead the design and implementation of sophisticated, production-ready detection rules and queries across the ELK stack, security data lakes, and multi-cloud logging platforms
Architect and optimize complex search queries, aggregations, and analytics dashboards for high-velocity security monitoring, focusing on performance and cost efficiency
Design and build automated detection and response workflows (SOAR), ensuring seamless and reliable integration with critical incident response systems
Serve as the primary liaison with the threat intelligence team, developing and owning the framework to translate intelligence into scalable, actionable detection capabilities (e.g., MITRE ATT&CK coverage)
Establish and maintain a robust detection rule library, query templates, and lead the creation of security analytics playbooks for the wider team
Drive performance optimization and resource utilization strategies across petabyte-scale log datasets, including index design and data tiering
Develop and standardize custom visualizations, dashboards, and executive reporting capabilities for security stakeholders
Lead complex threat hunting operations, mentor junior team members on investigative techniques, and proactively refine detection logic to achieve near-zero false positive rates
Collaborate closely with the platform team to define the logging architecture roadmap based on future detection requirements and security observability goals
Proactively research emerging threats and attack patterns, translating novel techniques into strategic, forward-looking detection logic and advising security leadership

What we offer

Top-tier health benefits, dental, and vision insurance
Hybrid work environment
Flexible time off policy, with an encouraged 20 days off per year
$2000 annual counseling benefit
RRSP matching and RESP contribution
Clioversary recognition program with special acknowledgement at 3, 5, 7, and 10 years

Fulltime

Vulnerability Management Technical Lead

The role includes managing and optimizing vulnerability management workflows usi...

Location

India , Bengaluru

Salary:

Not provided

Sopra Steria

Expiration Date

Until further notice

Requirements

4 to 8 years of experience
engineering graduate - preferably B.E./B.Tech in IT or Computer Engineering
strong analytical skills
experience with security information and event management (SIEM) tools
~5 years of experience in information security, specifically in end-to-end vulnerability management with 2-3 years hands-on Rapid7 experience
advanced degrees or certifications preferred
knowledge of current cybersecurity trends, threats, and techniques
understanding of regulatory requirements
ability to work independently and collaboratively
good interpersonal and communication skills

Job Responsibility

ensure that Rapid7 is fully and effectively implemented
assist with design, implementation, and optimization of automated tagging workflows
build and refine InsightVM dashboards and reports for insights
integrate Rapid7 with external systems for accurate asset context and automated remediation ticket creation
collaborate with IT teams to reduce false positives and orphaned assets
implement and support scan scheduling and tuning
assist in risk acceptance workflows
troubleshoot scan and synchronization issues
drive process improvements in vulnerability management workflow
deliver security reports and presentations

What we offer

inclusive and respectful work environment
positions open to people with disabilities

Fulltime

Senior Information Security Engineer

This role is your opportunity to lead the charge in maturing e2Open’s security p...

Location

India , Bangalore

Salary:

Not provided

Blume Global

Expiration Date

Until further notice

Requirements

A proven track record in SIEM operations, vulnerability management, and incident response
Hands-on experience configuring and running security tools
Strong automation skills (e.g., scripting, orchestration)
The ability to lead through influence, guiding teams to adopt better practices
Experience navigating the challenges of complex, fast-changing environments (M&A exposure a plus)
Formal qualifications (CISSP, CISM, or equivalent) are valued

Job Responsibility

Configure, tune, and operate SIEM platforms to improve detection, response, and visibility
Lead vulnerability scanning and remediation
Take point in managing security incidents — from detection through investigation and resolution
Run and maintain key security tools
Drive automation-first approaches
Collaborate with engineering and IT teams to embed security into operations and culture
Help shape the roadmap for security maturity within e2Open

Security Engineer II

The Security Engineer II is an individual contributor who will participate and m...

Location

United States , Fountain Valley

Salary:

83940.00 - 120032.00 USD / Year

Hyundai AutoEver America

Expiration Date

Until further notice

Requirements

Bachelor’s Degree in Computer Science, Information Systems, or related field, or equivalent experience
Minimum 3 years of IT relevant experience or equivalent combination of experience plus at least 1 year of experience performing Security Engineering/Planning/Operations, preferably with SIEM or vulnerability management
Experience in medium to complex computing environments, with advanced knowledge in security technologies and services
Hands-on experience with at least two or more of the following Enterprise Security Technologies: Network Intrusion Prevention/Detection
Virtual Private Networks
SSL, IPSec, and Site-to-Site
Enterprise-Class Stateful Inspection Firewalls
Network Access Controls in context to Identity Management
Windows Server OS & Desktop OS
Network Packet Inspection

Job Responsibility

Design, build, test, and deploy new security technologies, which include the development of the operational manual and run books
Provides technical security operations engineering services to support and update existing security systems and works to automate processes related to security implementations, monitoring, and enforcement
Investigates, recommends, evaluates, deploys, and integrates operational security tools (e.g., SIEM, vulnerability scanning) and techniques to enhance protection of corporate assets and infrastructure
Participate in technical risk assessments and security exposure analyses of systems, networks, and business applications
Analyzes network security elements and overall network security architectural designs to ensure secure and optimal system and network performance and cost-effectiveness
Oversees the installation, configuration, and supportive processes of security technologies
Participate in or lead the Incident Response activities
Interacts with internal and external clients on security operations requirements, identifies security processes, and develops strategies/solutions to security issues
Keeps fully abreast of trends and changing technologies as they relate to IT, Network Engineering, and Information Security fields
Lead or assist in periodic or ad-hoc security reports that provide relevant situational awareness to our senior stakeholders

Fulltime

Cyber Security Engineer

Darumatic is an IT Consultancy and Recruitment Services Company that focuses on ...

Location

Australia , Canberra

Salary:

Not provided

Darumatic

Expiration Date

Until further notice

Requirements

Character clearance, including a police check
Negative Vetting level 1
Political neutrality
Australian citizen
Experience using Sentinel or a similar SIEM solution is essential
In-depth familiarity with the Australian Government Information Security Manual
Experience with security technologies such as endpoint protection, firewalls and IDS/IPS
Extensive experience in Windows, Linux, networking and system administration
Experience with security services in the cloud (Azure or AWS)

Job Responsibility

Detection and coordination of incident response to threats, both foreign and domestic, against critical electoral systems
Augmenting the existing operations team to assist in uplifting the existing capability
Maintenance of cyber security monitoring and analysis toolsets
Taking a lead role in the build of the cyber security architecture through consultation with client's internal teams to secure this architecture
Working primarily in the office
Ability to work shifts as required in response to cyber security incident, and also to support electoral events at key periods (e.g. close of rolls, polling day)

Lead SIEM Engineer

Fynity

Location:
United Kingdom , Hemel Hempstead

Category:
IT - Software Development

Contract Type:
Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:
December 08, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead SIEM Engineer

Lead SIEM Engineer

Solutions Engineering Lead

Solutions Engineering Lead

Senior Logging & Detection Engineer

Vulnerability Management Technical Lead

Senior Information Security Engineer

Security Engineer II

Cyber Security Engineer

Lead SIEM Engineer

Fynity

Location:United Kingdom , Hemel Hempstead

Category:IT - Software Development

Contract Type:Not provided

Salary:

Job Description:

Job Responsibility:

Requirements:

Additional Information:

Job Posted:December 08, 2025

Looking for more opportunities? Search for other job offers that match your skills and interests.

Similar Jobs for Lead SIEM Engineer

Lead SIEM Engineer

Solutions Engineering Lead

Solutions Engineering Lead

Senior Logging & Detection Engineer

Vulnerability Management Technical Lead

Senior Information Security Engineer

Security Engineer II

Cyber Security Engineer

Location:
United Kingdom , Hemel Hempstead

Category:
IT - Software Development

Contract Type:
Not provided

Job Posted:
December 08, 2025