Security Support Specialist

Security Support Specialist

Contract Duration: Initial 6 Months contract

Job Description

We are seeking an experienced Senior Technical Specialist to join the Endpoint Security Team as the Subject Matter Expert for Security Information and Event Management (SIEM) and the Enterprise Logging Layer (ELL). The role is responsible for the engineering, operation and continual improvement of the services that collect, process, enrich, route and retain security telemetry across the organisation. The successful candidate will help ensure that high-quality, relevant and timely security data is available to the Security Operations Centre (SOC), detection engineering, incident response and other authorised consumers.

Job Responsibilities

• Manage and enhance enterprise SIEM and security logging platforms, ensuring reliable performance, operational stability and effective security monitoring capabilities.
• Design, implement and maintain security data processing solutions, including log collection, transformation, filtering and distribution across multiple technology environments.
• Lead the integration of new security data sources, ensuring appropriate configuration, data accuracy, connectivity and successful integration with existing monitoring platforms.
• Support the enhancement and modernisation of security monitoring infrastructure, including platform migrations, upgrades, system improvements and technology lifecycle management.
• Collaborate with security operations, infrastructure, cloud and application teams to ensure monitoring solutions support threat detection, incident investigation and wider security requirements.
• Identify and resolve complex technical issues affecting security platforms, including data ingestion, connectivity, system performance and integration challenges.
• Develop and maintain technical standards, operational documentation and monitoring processes to support data quality, information retention and compliance requirements.
• Contribute to the design and improvement of scalable, secure and resilient logging infrastructure, including capacity management, service continuity and recovery capabilities.

Experience Required

• Substantial experience in enterprise IT security, including hands-on engineering, administration and support of SIEM platforms or centralised security logging solutions.
• Proven experience implementing and managing enterprise security monitoring technologies across complex infrastructure and application environments.
• Strong technical knowledge of security log collection, processing, normalisation, enrichment and routing, with experience managing the integration of multiple data sources.
• Experience working with security telemetry generated by Windows, Linux, networking technologies, identity platforms, cloud services and enterprise applications.
• Strong understanding of security monitoring architecture, data pipelines and the operational requirements associated with maintaining reliable security visibility.
• Experience using scripting and automation technologies such as Python, PowerShell, REST APIs or similar tools to improve platform administration and operational efficiency.
• Advanced troubleshooting capabilities across enterprise infrastructure, including networking, system connectivity, security technologies and platform performance.
• Demonstrated experience supporting technical change initiatives, infrastructure upgrades and complex incident resolution.
• Strong stakeholder management and communication skills, with the ability to collaborate effectively across technical teams and provide guidance on security monitoring solutions.

Desirable Skills

• Experience with enterprise SIEM technologies such as Microsoft Sentinel, Splunk, Google SecOps, IBM QRadar, Elastic Security or comparable platforms.
• Familiarity with security data processing and log management technologies such as Cribl, Logstash, Fluent Bit or similar solutions.
• Knowledge of security event formats and collection technologies, including Syslog, JSON, Windows Event Logs, APIs and cloud-native logging services.
• Understanding of detection engineering, security incident response, threat intelligence and frameworks such as MITRE ATT&CK.
• Experience supporting SIEM migrations, security platform modernisation or large-scale logging infrastructure improvements.
• Knowledge of security governance and regulatory frameworks, including ISO 27001, NIST and GDPR.
• Familiarity with infrastructure automation, version control, high-availability architecture and disaster recovery technologies.
• Experience managing security platform capacity, data retention requirements and optimisation of logging infrastructure costs.
• Relevant professional certifications such as CISSP, CompTIA Security+, GIAC or recognised cloud and security platform certifications.
• Previous experience mentoring technical colleagues and contributing to security architecture or technology improvement initiatives.

Educational Requirements

• Third-level degree in Computer Science, Information Technology, Cyber Security or a related discipline.