Senior SIEM Architect – Enterprise SOC Design

About the role

We are seeking a seasoned SIEM Engineer / Architect to lead the design, deployment, and optimisation of enterprise‑scale SIEM platforms within a modern Security Operations Centre (SOC). The successful candidate will shape SOC architecture, ensure high‑quality log ingestion, and drive detection engineering aligned with operational security needs.

Key responsibilities

• Design, architect and deploy centralized SIEM solutions for complex enterprise environments.
• Lead end‑to‑end SIEM implementations, including log source onboarding, data normalization, parsing and use‑case design.
• Develop high‑fidelity security analytics and reduce noise through effective alert strategies.
• Collaborate with SOC teams to align SIEM capabilities with detection, response and escalation processes.
• Work with IT, infrastructure, cloud and security engineering stakeholders to integrate SIEM into broader SOC tooling and workflows.
• Provide guidance on best practices, scalability and performance optimisation of SIEM platforms.

Required profile

• Proven experience designing, architecting and fully deploying SIEM platforms.
• Strong hands‑on expertise with at least one enterprise SIEM technology (Splunk, IBM QRadar, LogRhythm, ArcSight).
• Deep understanding of SOC architecture, including log pipelines, detection workflows and triage/escalation models.
• Experience handling logs from applications, infrastructure, security devices and user activity.
• Ability to translate business and security requirements into technical SIEM designs.

Required skills

• Splunk
• IBM QRadar
• LogRhythm
• ArcSight