OT SIEM Engineer

Reference: qerrvtl5ozopysxpy736

We are seeking an experienced OT SIEM Engineer to support the monitoring, detection and investigation of cyber security events across operational technology (OT) and industrial control system (ICS) environments. You will help design, implement and maintain security information and event management capabilities, ensuring that relevant logs and telemetry are collected, normalised and analysed effectively. Working closely with OT, IT, network and security teams, you will improve visibility across critical infrastructure while maintaining a strong focus on safety, availability and operational resilience.

Your responsibilities will include developing and tuning SIEM use cases, correlation rules, dashboards and alerts for OT environments; onboarding and managing data sources such as firewalls, endpoint technologies, network monitoring tools, industrial devices and remote access platforms; and investigating suspicious activity, escalating incidents and supporting effective remediation. You will contribute to threat hunting, incident response and forensic analysis, helping to identify indicators of compromise and emerging attack techniques. The role will also involve maintaining technical documentation, supporting compliance and assurance activities, participating in vulnerability and risk assessments, and recommending improvements to monitoring coverage and detection capability.

Applicants should have practical experience working with SIEM platforms, preferably in environments involving operational technology, industrial control systems or other critical infrastructure. A strong understanding of security monitoring, log management, incident response, network protocols and common attack frameworks such as MITRE ATT&CK for ICS is required. Experience with platforms such as Microsoft Sentinel, Splunk, QRadar or equivalent technologies would be beneficial, as would knowledge of SCADA, DCS, PLC and historian environments. Relevant cyber security qualifications or demonstrable equivalent experience are desirable. You will need excellent analytical and communication skills, a methodical approach to problem-solving, and the ability to work collaboratively in a complex, high-assurance environment. The role may involve occasional on-call support or travel to operational sites.

£75,000.00 - £80,000.00
Per annum
Added 15/10/2026
Reference: qerrvtl5ozopysxpy736

Other similar jobs

OT SIEM Engineer

Added 15/10/2026

We are seeking an experienced OT SIEM Engineer to support the development, operation and continual improvement of security monitoring across operational technology environments. You will play a key role in protecting industrial systems, control networks and connected assets by ensuring that relevant security events are collected, analysed and acted upon effectively. Working closely with operational technology, information security, infrastructure and engineering teams, you will help strengthen visibility and resilience across critical environments. Your responsibilities will include designing, configuring and maintaining SIEM use cases, dashboards, alerts and correlation rules relevant to OT and industrial control systems. You will onboard and validate...

Learn more

OT Security Engineer

Added 02/10/2026

We are seeking an OT Security Engineer to strengthen the protection of operational technology environments across critical industrial and manufacturing operations. In this role, you will help secure industrial control systems, supervisory control and data acquisition (SCADA) platforms, programmable logic controllers, engineering workstations, industrial networks and related connected assets. You will work closely with operational, engineering, IT and compliance teams to identify risks, improve resilience and support the safe and reliable operation of essential processes. Your responsibilities will include conducting OT security assessments, identifying vulnerabilities and developing practical remediation plans that recognise the availability and safety requirements of industrial environments....

Learn more

Senior OT Cyber Engineer

Added 23/09/2026

We are seeking a Senior OT Cyber Engineer to strengthen the security and resilience of operational technology environments across critical industrial and infrastructure operations. In this role, you will provide expert guidance on protecting industrial control systems, supervisory control and data acquisition (SCADA) platforms, distributed control systems, plant networks and other connected operational assets. You will work closely with engineering, operations, information security and third-party teams to identify cyber risks and deliver practical, risk-based improvements without compromising safety, availability or production. Your responsibilities will include developing and maintaining OT security architectures, policies, standards and technical procedures; conducting security assessments, threat...

Learn more

Senior OT Cyber Engineer

Added 23/09/2026

We are seeking a Senior OT Cyber Engineer to lead the protection, resilience and continuous improvement of operational technology environments across critical industrial and infrastructure operations. You will work at the intersection of cybersecurity, engineering and operations, helping to secure industrial control systems, supervisory control and data acquisition (SCADA) platforms, distributed control systems, plant networks and connected operational assets. The role requires a practical understanding of the safety, availability and performance requirements that distinguish OT environments from traditional IT systems. Your responsibilities will include designing and implementing OT cybersecurity architectures, network segmentation and secure remote-access solutions; conducting risk assessments, vulnerability...

Learn more

Senior OT Cyber Engineer

Added 23/09/2026

We are seeking a Senior OT Cyber Engineer to strengthen the security and resilience of operational technology environments across critical industrial and infrastructure operations. In this role, you will provide technical leadership across the design, implementation, and continuous improvement of OT cybersecurity controls, helping to protect systems that support safe, reliable, and uninterrupted operations. You will work closely with engineering, infrastructure, control systems, risk, and operational teams to understand business requirements and translate them into practical security solutions. Your responsibilities will include assessing OT networks, industrial control systems, supervisory control and data acquisition environments, and associated connected technologies. You will...

Learn more

Cyber Security Engineer

Added 14/09/2026

We are seeking a Cyber Security Engineer to help protect critical systems, applications, networks and data from evolving cyber threats. In this role, you will design, implement and maintain effective security controls across cloud and on-premises environments, while supporting the continuous improvement of the organisation’s security posture. You will work closely with infrastructure, software development, IT operations and risk teams to ensure security is embedded throughout the technology lifecycle. Your responsibilities will include monitoring and investigating security alerts, conducting vulnerability assessments, supporting incident response activities and coordinating remediation of identified risks. You will contribute to security architecture reviews, threat modelling,...

Learn more

Senior IBM QRadar Security Engineer – SIEM | Python | CrowdStrike

Added 06/10/2026

We are seeking a Senior QRadar Security Engineer to design, maintain and improve enterprise security monitoring and incident detection capabilities. You will take ownership of SIEM engineering activities, including QRadar architecture, log source onboarding, parsing, normalisation, correlation rules, dashboards, offence management and performance tuning. Working closely with security operations, infrastructure and application teams, you will ensure that relevant telemetry is collected, reliable and aligned with threat detection and compliance requirements. The role will involve developing and refining use cases for suspicious activity, supporting incident investigations, conducting threat hunting and improving the organisation’s overall detection and response maturity. You will integrate...

Learn more

SIEM Security Engineer

Added 04/09/2026

We are seeking a skilled SIEM Security Engineer to support the monitoring, detection, and response capabilities of a dynamic security operations environment. In this role, you will design, maintain, and optimise Security Information and Event Management (SIEM) platforms, ensuring that security telemetry is collected, normalised, and analysed effectively across cloud, infrastructure, application, and endpoint environments. You will work closely with security analysts, infrastructure teams, and application owners to improve visibility and strengthen overall cyber resilience. Your responsibilities will include developing and tuning correlation rules, detection use cases, dashboards, alerts, and automated workflows. You will investigate complex security events, support incident...

Learn more

SIEM Security Engineer

Added 04/09/2026

We are seeking a skilled SIEM Security Engineer to design, operate, and continuously improve security information and event management capabilities within a fast-paced technology environment. The successful candidate will be responsible for monitoring security events, investigating alerts, identifying threats, and supporting timely incident response across cloud, network, endpoint, and application environments. You will work closely with security operations, infrastructure, engineering, and risk teams to strengthen detection and response capabilities. Key responsibilities include developing and maintaining SIEM use cases, correlation rules, dashboards, alerts, and automated workflows. You will onboard and normalise log sources, troubleshoot data-ingestion issues, and ensure the availability, integrity,...

Learn more

Sr. Product Manager - Next-Gen SIEM (Hybrid)

Added 15/10/2026

We are seeking a Senior Product Manager to lead the strategy, development and evolution of a next-generation Security Information and Event Management (SIEM) platform. This is a hybrid role for an experienced product leader who understands the rapidly changing cybersecurity landscape and can translate complex customer and market needs into clear, commercially successful product outcomes. You will own the product vision, roadmap and prioritisation framework, ensuring the platform delivers effective threat detection, investigation, response and reporting capabilities for a wide range of customers. You will work closely with engineering, design, research, threat intelligence, security operations, sales and marketing teams to...

Learn more

Senior Site Reliability Engineer / SecOps Engineer

Added 01/09/2026

We are seeking a Senior Site Reliability Engineer / SecOps Engineer to strengthen the reliability, security, and operational resilience of critical digital services. This role combines site reliability engineering, cloud infrastructure, automation, and security operations, with responsibility for ensuring systems remain available, scalable, observable, and protected. You will work closely with engineering, product, and infrastructure teams to identify operational risks, improve platform performance, and embed secure practices throughout the software development lifecycle. Key responsibilities include designing and maintaining resilient cloud infrastructure; developing infrastructure as code and automated deployment pipelines; monitoring system health, performance, and availability; and leading incident response, root-cause...

Learn more

PAM Engineer - Assistant Vice President

Added 15/10/2026

We are seeking an experienced PAM Engineer to join a specialist cybersecurity team in an Assistant Vice President-level role. You will be responsible for designing, implementing and maintaining privileged access management controls across a complex technology environment, helping to protect critical systems, applications and sensitive data. The role will involve working closely with information security, infrastructure, cloud, application and risk teams to deliver secure, practical and sustainable access solutions. Your responsibilities will include administering and developing PAM platforms, managing privileged accounts, service accounts and credentials, and implementing secure vaulting, rotation and just-in-time access capabilities. You will define and enforce least-privilege...

Learn more

Senior IT Engineer (Infrastructure and Security)

Added 15/10/2026

We are seeking a Senior IT Engineer (Infrastructure and Security) to take a leading role in maintaining, securing and improving a complex technology environment. You will be responsible for the availability, performance and resilience of core infrastructure, while helping to strengthen security controls and support the organisation’s wider technology strategy. This is a hands-on role requiring strong technical expertise, sound judgement and the ability to work effectively with colleagues, suppliers and stakeholders at all levels. Your responsibilities will include managing and supporting server, cloud, network, storage, backup and virtualisation platforms; monitoring systems and resolving incidents, problems and service requests; and...

Learn more

Security Operations Engineer

Added 15/10/2026

We are seeking a Security Operations Engineer to help protect critical systems, applications and data across a complex technology environment. You will work as part of a collaborative security operations function, monitoring and responding to threats, improving defensive capabilities and supporting the continued development of secure and resilient services. This role would suit an experienced security professional who enjoys solving problems, investigating incidents and working closely with technical teams. Your responsibilities will include monitoring security alerts and events, triaging potential incidents, carrying out investigations and coordinating appropriate containment and remediation activity. You will contribute to vulnerability management, threat hunting, security...

Learn more
At least 8 characters, 1 uppercase, 1 lowercase and 1 special character or number
Your file must be a doc, docx or pdf. No larger than 5MB.