SIEM Engineer

Salary: £50,000 - 70,000 per year

Requirements

• Proven experience working as a SIEM Engineer, Cyber Security Engineer, or Security Monitoring Engineer.
• Previous SIEM migration experience, particularly migrations from Rapid7, Splunk, QRadar, ArcSight, or similar platforms.
• Experience working within large, complex enterprise environments.
• Strong hands-on experience with Microsoft Sentinel.
• Experience onboarding and integrating security log sources.
• Knowledge of log transformation, normalisation, and data ingestion processes.
• Experience creating, migrating, and tuning detection rules and alerts.
• Strong understanding of security monitoring, threat detection, and incident response.

Responsibilities

• Lead the migration of security monitoring capabilities from Rapid7 to Microsoft Sentinel.
• Transform, normalise, harmonise, and import security log data into Sentinel.
• Onboard and integrate a large volume of log sources across the estate.
• Recreate and optimise detection rules, analytics, and use cases within Microsoft Sentinel.
• Build, tune, and maintain alerts to improve threat detection and reduce false positives.
• Support the design and implementation of scalable SIEM monitoring capabilities.
• Work closely with security operations and engineering teams to ensure a smooth migration and transition.

Technologies

• Support
• Security
• Splunk

More

Arup is a collective of designers, consultants and experts working globally, with a purpose-driven and collaborative culture shaped over 75 years. Through our partnership with AMS, we are supporting a 12-month SIEM Engineer contract based in Cardiff with remote work available. This role sits within a large-scale cybersecurity transformation programme, focused on migrating security monitoring capabilities from Rapid7 to Microsoft Sentinel across a complex enterprise environment with over 1,000 systems. We are committed to inclusion, diversity, and reasonable adjustments throughout the recruitment process.

last updated 37 week of 2026