Security Engineer ( SIEM use case development )

Security Engineer

My client, an international financial services provider based in Bristol are actively looking for a security engineer to join them on an initial 6 month contract basis. This role can be based from Bristol or has the option of being based remotely from other locations such as East Anglia, London and or North East. Within this role you will ideally be proficient with a range of SIEM tools (Qradar,) and or threat intelligence tooling development. The preference being SIEM use case development.

The role

Current activities include; QRadar use case development and deployment, end to end lifecycle including:-

• Identification and prioritisation based on the Aviva context
• Log source identification to support use case
• Key point of contact with security SME's
• Use case tuning
• Playbook definition
• Log source lifecycles (on boarding, off boarding, monitoring)
• Use case deployment into live and monitoring Threat intelligence platform
• SME for ensuring platform build meets security use cases
• Definition of use cases onto the threat intelligence platform
• Phase 2 of this project will see their threat intelligence platform integrated with Qradar and Threat Quotient deployment and development