Overview

Harvey Nash is delighted to be working with our public sector client on the search for an experienced SIEM Engineer. This contract offers the chance to support a high-profile programme that underpins critical services and strengthens security resilience across a complex environment.

Pay information

This range is provided by s1jobs. Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.

Base pay range

Base pay range information as provided in the listing.

Note: This role is Inside IR35 and requires 2 days per week in the Glasgow office. To apply, please send your CV using the link.

Responsibilities

• Proven SIEM Expertise: Hands-on experience with leading SIEM platforms (e.g., Splunk, Azure Sentinel, or Elastic SIEM), including log ingestion, correlation rule creation, alert tuning, and incident response workflows.
• AWS Security Integration: Practical knowledge of AWS services relevant to SIEM, such as CloudTrail, GuardDuty, Security Hub, CloudWatch, and VPC Flow Logs, and the ability to integrate these with your SIEM solution.
• Threat Detection & Response Skills: Ability to design and implement detection use cases, threat hunting queries, and automated response playbooks tailored to the environment.
• Compliance & Governance Awareness: Understanding of regulatory and compliance requirements (e.g., ISO 27001, GDPR, CRF, CAF) and how to align SIEM configurations and reporting to meet audit and governance needs.
• Scripting & Automation Proficiency: Skills in scripting languages (e.g., Python, PowerShell) and infrastructure-as-code tools (e.g., Terraform, CloudFormation, GIT).

Qualifications

• Experience level: Mid-Senior
• Role: SIEM Engineer

Requirements

• Location: Glasgow (onsite 2 days per week)
• Inside IR35

Seniority level

• Mid-Senior level

Employment type

• Contract

Job function

• Engineering and Information Technology

Industries

• Staffing and Recruiting