Anticipated Contract End Date/Length: September 30, 2026
Work Set Up: Hybrid (must be eligible for BPSS)
Our client in the Information Technology and Services industry is looking for a SIEM Integration Analyst to support the onboarding, normalisation, and optimisation of log sources within the organisation鈥檚 Security Information and Event Management platform. This role focuses on improving security visibility and detection capabilities by ensuring that log data from multiple systems is accurately integrated, parsed, and structured for analysis. The position plays a key role in supporting Security Operations Centre activities by maintaining reliable data ingestion pipelines and enabling the development of effective detection use cases.
What you will do:
- Onboard new log sources into the SIEM platform and validate ingestion, parsing, and field mapping accuracy.
- Maintain and update connectors, collection agents, APIs, and log ingestion pipelines.
- Ensure log data quality and normalisation to support effective detection and correlation use cases.
- Troubleshoot data ingestion gaps, parsing failures, and log integration issues.
- Collaborate with SOC analysts to improve alert quality and reduce false positives.
- Support the development and optimisation of SIEM detection use cases by ensuring reliable data inputs.
- Monitor ingestion pipelines and log processing workflows to maintain platform performance and reliability.
- Maintain documentation related to log integrations, ingestion configurations, and operational processes.
- Support incident management and change management processes related to SIEM integrations.