Quick Overview
Job Description
Security Engineer - SIEM/QRadar - 6-month contract - London/remote
Overview
My Client is seeking a hands-on Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future migration to Splunk.
Key Responsibilities of the Security Engineer
- Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts.
- Review and optimise detection use cases to improve threat visibility and reduce false positives.
- Configure and maintain log collection, parsing, normalisation and aggregation.
- Support log aggregation using Fluentd, Cribl or similar technologies.
- Ensure relevant security logs are accurately ingested and available to the third-party SOC.
- Troubleshoot log ingestion, parsing and SIEM detection issues.
- Identify opportunities to improve SIEM coverage, logging quality and detection capabilities.
- Support planning and potential migration from QRadar to Splunk.
Essential Skills & Experience from the Security Engineer
- Strong hands-on experience with IBM QRadar SIEM.
- Experience developing, maintaining and tuning SIEM rules and correlation searches.
- Good understanding of security logging, log sources and event normalisation.
- Experience with log aggregation and forwarding technologies.
- Experience working with SOC teams and supporting security monitoring operations.
Desirable Skills from the Security Engineer
- Experience with Fluentd, Cribl or Fluent Bit.
- Exposure to Splunk SIEM and migration projects.
- Scripting experience using Python, Bash or similar.
- Experience onboarding new log sources and troubleshooting ingestion pipelines.
The Security Engineer is required 1 day a week onsite in Central London.
Apply now to speak with VIQU IT in confidence. Or reach out to Connor Smal via the VIQU IT website.
Do you know someone great? We'll thank you with up to £1,000 if your referral is successful (terms apply).
Similar jobs
- HA
Incident Response Analyst
Hackajob Ltd
Bristol, South West England🇬🇧Hybrid3 days agoTechnology - NH
Identity Analyst
NewNational Highways
Rusholme, Manchester🇬🇧Hybrid20 hours agoTechnology - CT
Senior Cyber Security Analyst
NewCathcart Technology
Hillhead, Glasgow City Centre🇬🇧Hybrid20 hours agoTechnology - NH
Identity Analyst
NewNational Highways
Easton, Bristol🇬🇧Hybrid20 hours agoTechnology - DR
Cyber Security Lead
NewDGH Recruitment Ltd.
City, London🇬🇧Hybrid2 hours agoTechnology - FC
Cybersecurity Consultant
NewFocus Cloud Limited
London🇬🇧On-site2 hours agoMicroservicesOWASPPCI DSS+1Technology - WA
Senior Security Engineer
NewAuto ApplyWave
United Kingdom🇬🇧Hybrid6 hours agoGCPSwiftSwiftUI+12Technology - SA
Senior Security Engineer - Enterprise Security
NewAuto ApplySamsara
London - UK2; Remote - London🇬🇧Remote3 hours agoSplunkIoTPython+2Technology - QR
Enterprise PKI Specialist (Contractor)
NewAuto ApplyQube Research & Technologies
London🇬🇧Hybrid9 hours agoAWSActive DirectoryAzure+4 - SA
Senior Security Operations Engineer
NewAuto ApplySamsara
United Kingdom🇬🇧Remote10 hours agoGCPAWSIoT+1Technology - IM
Cyber Security Engineer - Governance, Risk & Compliance - Remote (UK Only)
NewAuto ApplyImmersivelabs
United Kingdom🇬🇧Remote8 hours agoSOC 2ComplianceTechnology - HY
Senior Security Engineer
NewAuto ApplyHyperexponential
London (hybrid)🇬🇧Hybrid5 hours agoAWSSOC 2Background Checks+5Technology