Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
ЗП не указана
На похожих ролях по рынку
$50к$76кмедиана$98к
8 в выборке
79
Хорошая вакансия
развернуть
Обязанности очерчены достаточно ясно, используются современные инструменты кибербезопасности и заявлены возможности развития и поддержка баланса работы и жизни. Но без указанной зарплаты сложнее оценить финансовые условия.
Кликните для подробной информации
Зарплата не указанаСовременный стекЧёткие обязанностиПоддержка развитияБаланс работы и жизниКритическая инфраструктура
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
OT SIEM Engineer (Microsoft Sentinel): Developing and enhancing SIEM capabilities across enterprise and Operational Technology environments with an accent on security telemetry integration, detection engineering, and automation. Focus on building KQL detections, migrating LogRhythm data into Microsoft Sentinel, and implementing CI/CD and SOAR workflows for regulated Critical National Infrastructure environments.
Location: Hybrid in Glasgow or Aberdeen, Scotland, United Kingdom
Company
hirify.global delivers managed services, cyber security, cloud, data, AI, and digital transformation solutions for critical national infrastructure, energy, public sector, and enterprise customers.
What you will do
Onboard and integrate enterprise and Operational Technology log sources into Microsoft Sentinel.
Develop parsers, data transformations, normalisation processes, KQL queries, analytics rules, alerts, and detection logic.
Build and support Logic Apps, Playbooks, and SOAR automation workflows for security operations.
Support migration of security telemetry from LogRhythm and other existing SIEM platforms into Microsoft Sentinel.
Implement CI/CD pipelines with Azure DevOps and Git to deploy and manage Sentinel content and integrations.
Collaborate with Cyber Defence and Security Operations teams on threat hunting, incident response, detection engineering, and continuous improvement.
Requirements
Hands-on experience in SIEM engineering, administration, or security monitoring.
Experience onboarding log sources, integrating security telemetry, parsing and normalising events, and developing correlations.
Experience creating and optimising queries with KQL or equivalent SIEM query languages.
Knowledge of threat detection, use-case development, alert tuning, incident response, and threat hunting.
Experience with Logic Apps, Playbooks, SOAR platforms, Git, Azure DevOps, or comparable tools.
Strong analytical, troubleshooting, communication, and technical collaboration skills.
Nice to have
Hands-on Microsoft Sentinel engineering and administration experience.
Experience with LogRhythm, Splunk, QRadar, ArcSight, or Elastic.
Knowledge of Microsoft Azure security services, cloud-native monitoring, NIST, MITRE ATT&CK, and Cyber Essentials.
Experience in Operational Technology, Critical National Infrastructure, utilities, energy, or SIEM migration programmes.
Current Security Check clearance or eligibility to obtain it.
Culture & Benefits
Personalised career development plans and learning opportunities.
Flexible working arrangements supporting work-life balance.
Generous annual leave and enhanced family-friendly benefits.
Pension scheme and access to private health, wellbeing, and insurance schemes.
Inclusive workplace with equal-opportunity employment and support for accessible hiring.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →