SIEM Architect

Architect - SIEM - LogRhythm
Basingstoke
Excellent Salary + Benefits
SC Cleared

We're looking for a SIEM Architect to join our leading Defence IT Services + Solutions provider based in Basingstoke. You'll be joining the dynamic Solutions team with the aim to define and deliver a SIEM (Security Incident Event Managment) solution to meet current and future customer needs.

You'll report into the Solutions Lead, and encompass the following -

• Complete responsibility for the overall technical solution and associated technical artefacts for the customer(s).
• Manage the risk and impact of any changes, which affect the architecture of the solution.
• Lead a small design team to deliver the customer requirements, setting high-level criteria for the design of the solution and exercising design control over the implementation.

Technical Skills (3 or more of the following):

• Experience of creating High Level Designs, Low Level Designs, BOM's and support documentation
• Experience of implementing a LogRhythm SIEM and NetMon environment using physical appliances monitoring devices, end user activity, collecting and processing logs in accordance with the appropriate architectural patterns e.g. JSP440, GPG13, SafeGuarding GOLD guidelines and standards etc.
• Experience of creating multiple machine policies including full endpoint monitoring of UAD's employing File Integrity Monitoring, Data Loss Defender CD/DVD and USB port Monitoring, Registry Integrity Monitoring, User Activity Monitoring, Network Activity Monitoring.
• Experience of creating Regexes and parsing rules for "non-standard" logs
• Experience of Monitoring Enterprise network traffic at Application layer
• Experience of the Log Processing Policy and the writing of regular expressions
• Experience of working with 3^rd parties
  
  

Candidates must be a UK national and eligible for SC clearance.

The reward for the right candidate is an excellent opportunity to join an expanding organisation offering excellent long-term career prospects, as well as a competitive salary and full company benefits. Please apply with current CV indicating your relevant experience and qualifications

We are fully committed to the development of a diverse workforce. Therefore, applications for employment are always fully considered, irrespective of gender, ethnic origin, race, faith, sexual orientation.

- SIEM (LogRhythm) Architect - SIEM - LogRhythym - Defence - SC Cleared -