BAE Systems

1 week ago

SIEM Specialist and Detection Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Design, deploy, and maintain SIEM/SOAR detection and automation capabilities for a client’s monitored environment. Build detection use cases using MITRE frameworks and client requirements, develop playbooks, test and release updated analytics, and minimize false positives. Partner with clients on threat hunting and content enrichment, integrate with vulnerability/asset/configuration tools, and ensure deployments follow change management. Based in Canberra with substantial client-site time and NV2 clearance minimum.

Location: Canberra

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Oversee SIEM/SOAR deployment and implementation activities, ensuring entry criteria are met and planned activities completed with rollback plans where required.
•Identify, plan, develop, deploy, test, and release security detection use cases into production.
•Produce, update, and maintain playbooks for detection and automation content across the monitored estate.
•Maintain and assess existing detection content to keep it current and relevant, minimizing false positives and evaluating rule effectiveness.
•Support threat hunting, threat/exposure modelling, integrate with vulnerability/asset/configuration management tools, and approve documentation for releases and changes through change management.

Travel: High travel

Key Requirements

•Strong knowledge of how Azure and AWS security controls work as well as detection tools for large cloud environments.
•Produce and maintain detection content and playbooks on Sentinel and Splunk, including threat-led use cases.
•Strong knowledge of SIEM/SOAR tooling (Splunk and Sentinel at a minimum) and other tooling such as threat intelligence and traffic analysis.
•Deep knowledge of operational ICT service delivery management and security architecture, including networking.
•Security clearance at NV2 minimum, with candidates expected to undergo PV.

Skills:Client-side consultingStakeholder engagementCommunicationCoaching/mentoringIndependent working

Tech Stack:AzureAWSSIEMSOARMicrosoft SentinelSplunkSplunk ESMITREThreat intelligenceTraffic analysisTCP/IPSecurity monitoringSOCPlaybooksDetection rulesAnalytics

Eligibility

Security Clearance:NV2

Company Brief

BAE Systems

Multinational defence, security and aerospace company designing, manufacturing and supporting military and civilian systems including naval ships, submarines, aircraft, cyber solutions and electronic systems for governments and commercial customers.

Industry: Defense Manufacturing

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1999

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

BAE Systems

1 week ago

SIEM Specialist and Detection Engineer

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 15 hours agoStatus: Live

Job Summary

Location: Canberra

Workplace: Onsite

Employment Type: Full time

Job Function: Cybersecurity

Key Responsibilities

•Oversee SIEM/SOAR deployment and implementation activities, ensuring entry criteria are met and planned activities completed with rollback plans where required.
•Identify, plan, develop, deploy, test, and release security detection use cases into production.
•Produce, update, and maintain playbooks for detection and automation content across the monitored estate.
•Maintain and assess existing detection content to keep it current and relevant, minimizing false positives and evaluating rule effectiveness.
•Support threat hunting, threat/exposure modelling, integrate with vulnerability/asset/configuration management tools, and approve documentation for releases and changes through change management.

Travel: High travel

Key Requirements

•Strong knowledge of how Azure and AWS security controls work as well as detection tools for large cloud environments.
•Produce and maintain detection content and playbooks on Sentinel and Splunk, including threat-led use cases.
•Strong knowledge of SIEM/SOAR tooling (Splunk and Sentinel at a minimum) and other tooling such as threat intelligence and traffic analysis.
•Deep knowledge of operational ICT service delivery management and security architecture, including networking.
•Security clearance at NV2 minimum, with candidates expected to undergo PV.

Skills:Client-side consultingStakeholder engagementCommunicationCoaching/mentoringIndependent working

Tech Stack:AzureAWSSIEMSOARMicrosoft SentinelSplunkSplunk ESMITREThreat intelligenceTraffic analysisTCP/IPSecurity monitoringSOCPlaybooksDetection rulesAnalytics

Eligibility

Security Clearance:NV2

Company Brief

BAE Systems

Industry: Defense Manufacturing

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1999

Website LinkedIn