About this role
Salary: £50,000 - 70,000 per year
Requirements: Proven experience working as a SIEM Engineer, Cyber Security Engineer, or Security Monitoring Engineer.Previous SIEM migration experience, particularly migrations from Rapid7, Splunk, QRadar, ArcSight, or similar platforms.Experience working within large, complex enterprise environments.Strong hands-on experience with Microsoft Sentinel.Experience onboarding and integrating security log sources.Knowledge of log transformation, normalisation, and data ingestion processes.Experience creating, migrating, and tuning detection rules and alerts.Strong understanding of security monitoring, threat detection, and incident response. Responsibilities: Lead the migration of security monitoring capabilities from Rapid7 to Microsoft Sentinel.Transform, normalise, harmonise, and import security log data into Sentinel.Onboard and integrate a large volume of log sources across the estate.Recreate and optimise detection rules, analytics, and use cases within Microsoft Sentinel.Build, tune, and maintain alerts to improve threat detection and reduce false positives.Support the design and implementation of scalable SIEM monitoring capabilities.Work closely with security operations and engineering teams to ensure a smooth migration and transition. Technologies: SupportSecuritySplunk More:
Arup is a collective of designers, consultants and experts working globally, with a purpose-driven and collaborative culture shaped over 75 years. Through our partnership with AMS, we are supporting a 12-month SIEM Engineer contract based in Cardiff with remote work available. This role sits within a large-scale cybersecurity transformation programme, focused on migrating security monitoring capabilities from Rapid7 to Microsoft Sentinel across a complex enterprise environment with over 1,000 systems. We are committed to inclusion, diversity, and reasonable adjustments throughout the recruitment process.
last updated 37 week of 2026