SIEM Application Engineer (Snowhill, Birmingham, United Kingdom)

4 Days Old

SIEM Application Engineer (Snowhill, Birmingham, United Kingdom)Recruiter: Mia James Career Grade: DInternal Closing Date: 26th sept 2025Why this job mattersThe new Network SIEM is essential to BT’s network security, meeting TSA requirements and improving our CAF level. Your role as a SIEM Application Engineer in Security Engineering is to support the development, implementation, operation and support of BTs Strategic SIEM development. We are seeking a skilled SIEM Application Engineer with expertise in Elasticsearch to join our dynamic team. As a SIEM engineer, you will play a critical role in designing, developing, and maintaining our security information and event management (SIEM) system. Your focus will be on leveraging Elasticsearch and related technologies to enhance threat detection, incident response, and overall security posture. This role is hybrid (3 days in office) and can be based in one of the following offices: Birmingham, Manchester, Ipswich (Ipswich only applicable to existing BT employees)What you’ll be doingSIEM Solution Development:Collaborate with security analysts and architects to design and implement SIEM solutions using Elasticsearch.Optimize SIEM rules, alerts, and dashboards for efficient threat detection.Collaboration:Collaborate effectively with others to drive forward key security objectivesPresentation and documentation writing (to both technical and business audiences)Query Optimization and Performance Tuning:Write efficient Elasticsearch queries to retrieve relevant security events.Monitor and manage the performance of the SIEM infrastructure.Security Engineering:Contribute to security engineering projects, transitions, and transformations.Work closely with security operations and associated security incident response systemsStay informed about emerging threats and security best practices.Data Ingestion and Enrichment:Configure Elasticsearch pipelines for data ingestion from various sources, primarily from KafkaEnhance data enrichment by integrating threat intelligence feeds and contextual information.Keep abreast of relevant technologies in the areaReading, attending briefings and talks.  Contribute to the running of your team. Knowledge-sharing, In team discussions, Defining and improving working procedures Organisation of team events.  Help colleagues in the team to grow by mentoring when required. Keep abreast of relevant news and updates at BT. This may entail the following: attending briefings and talks. Agree personal goals with the Team Lead for the year and work towards achieving these. Skills Required for the RoleEssential:Security and Compliance with Elastic Security:Set up access controls, authentication, and encryption using Elastic Security features.Ensure compliance with data protection regulations.Detection Rule Development: Ability to create, test, and optimise detection rules to identify suspicious activities and potential threats based on the  MITRE ATT&CK FrameworkPerformance Tuning with Elasticsearch and Logstash:Fine-tune query performance using Elasticsearch indices and mappings.Monitor Logstash pipelines and optimize resource utilization.Kibana Visualization and Monitoring:Leverage Kibana for data visualization, dashboards, and real-time monitoring.Create custom visualizations to track data quality metrics and system performance.Elastic integrationIntegration of the SIEM with critical systems to provide alerting, monitoring, data enrichment.ETL Processes with Logstash:Design, develop, and maintain data pipelines using Logstash, part of the Elastic Stack.Automate data ingestion, transformation, and loading tasks.Beats for Data Collection:Agent and Agent Policy Management: Proficiency in configuring and managing agents, including setting up agent policies for various operation systems. Ensure seamless data flow from endpoints to the Elastic Stack.Data Cleaning and Enrichment with Elasticsearch:Utilize Elasticsearch for efficient data storage and retrieval.Implement data validation, enrichment, and indexing.Collaborate with data analysts to create meaningful search experiences.Database Architecture and Scaling with Elasticsearch:Optimize data storage and retrieval mechanisms within Elasticsearch clusters.Implement sharding, replication, and index management strategies.End-to-End Solution Delivery: Expertise in taking ownership of a requirement from start to finish, including gathering detailed requirements, designing, and implementing robust, innovative solutions.Experience Required for the RoleMandatoryBachelor’s/Master’s degree in Computer Science, Information Systems, Engineering, or other related fields5+ years of engineering experience in delivering cybersecurity solutionsExperience in key cyber technologies such as SIEM technologies (Elastic preferred), vulnerability management, access management and other commonly used Enterprise security controls. Ideally from both a development and operational perspectiveAdvantageous:SIEM implementation and usage Experience of Elastic Stack (ELK)Knowledge of Offensive testing frameworksKnowledge of Linux, Windows and Network AdministrationKnowledge and experience of cloud services (public or private), OpenStack and K8SCyber security qualificationsKnowledge of Telecoms Security Act (TSA)Knowledge of architectural concepts such as microservices, service mesh.Knowledge of Git and Devops practicesKnowledge of Terraform/Ansible systemsStrong knowledge of security policy/regulatory frameworksAt least 3-5 years experience of cyber security engineering and deliveryBenefitsOn target 10% on target bonus​BT Pension scheme, minimum 5% Employee contribution, BT contribution 10%​From January 2025, equal family leave:  receive 18 weeks at full pay, 8 weeks at half pay and 26 weeks at the statutory rate. It’s for all parents, no matter how your family is made up.​Enhanced women’s health support: including help with menopause symptoms, cancer screenings, period care and more.​25 days annual leave (not including bank holidays), increasing with service​24/7 private virtual GP appointments for UK colleagues​2 weeks carer’s leave ​World-class training and development opportunities​Option to join BT Shares Saving schemes.About usBT Group was the world’s first telco and our heritage in the sector is unrivalled.  As home to several of the UK’s most recognised and cherished brands – BT, EE, Openreach and Plusnet, we have always played a critical role in creating the future, and we have reached an inflection point in the transformation of our business.  Over the next two years, we will complete the UK’s largest and most successful digital infrastructure project – connecting more than 25 million premises to full fibre broadband.  Together with our heavy investment in 5G, we play a central role in revolutionising how people connect with each other.  While we are through the most capital-intensive phase of our fibre investment, meaning we can reward our shareholders for their commitment and patience, we are absolutely focused on how we organise ourselves in the best way to serve our customers in the years to come.  This includes radical simplification of systems, structures, and processes on a huge scale. Together with our application of AI and technology, we are on a path to creating the UK’s best telco, reimagining the customer experience and relationship with one of this country’s biggest infrastructure companies.   Change on the scale we will all experience in the coming years is unprecedented.  BT Group is committed to being the driving force behind improving connectivity for millions and there has never been a more exciting time to join a company and leadership team with the skills, experience, creativity, and passion to take this company into a new era.A FEW POINTS TO NOTE:Although these roles are listed as full-time, if you’re a job share partnership, work reduced hours, or any other way of working flexibly, please still get in touch.We will also offer reasonable adjustments for the selection process if required, so please do not hesitate to inform us.DON'T MEET EVERY SINGLE REQUIREMENT?Studies have shown that women and people who are disabled, LGBTQ+, neurodiverse or from ethnic minority backgrounds are less likely to apply for jobs unless they meet every single qualification and criteria. We're committed to building a diverse, inclusive, and authentic workplace where everyone can be their best, so if you're excited about this role but your past experience doesn't align perfectly with every requirement on the Job Description, please apply anyway - you may just be the right candidate for this or other roles in our wider team.
Apply
Location:
Birmingham
Job Type:
FullTime

We found some similar jobs based on your search