Application Engineer, SIEM

- Strong experience configuring and operating SIEM platforms (Elasticsearch-based solutions preferred) - Ability to create, test, and optimise detection rules aligned to the MITRE ATT&CK framework - Experience improving detection fidelity while reducing false positives - Hands-on experience with Elasticsearch query optimisation, indexing, and mappings - Performance tuning of Elasticsearch and Logstash pipelines - Experience using Kibana for dashboards, visualisations, and operational monitoring - Implementation of access controls, authentication, and encryption within SIEM platforms - Understanding of security policy, governance, and regulatory frameworks - Experience supporting compliance with data protection and security standards - Experience with the Elastic Stack (ELK) in enterprise environments (desirable) - Knowledge of offensive security frameworks and adversary techniques (desirable) - Experience with cloud platforms, containerisation, and orchestration (e.g. Kubernetes) (desirable) - Familiarity with DevOps practices, Git, and CI/CD pipelines (desirable) - Infrastructure-as-Code experience (e.g. Terraform, Ansible) (desirable) - Relevant cybersecurity certifications (desirable) - 3–5 years experience in cybersecurity engineering or delivery roles (required) - Bachelors or Masters degree in Computer Science, Engineering, Information Systems, or a related field (or equivalent experience) (required) - 5 years experience delivering cybersecurity or security engineering solutions (required)