SIEM Engineer

As a Barclays SIEM Engineer, you will will be working as a key subject matter expert within the CSO Security Engineering Technology Services team. You will be responsible for various security toolsets that CSO operates; a global SIEM and User Behaviour Analytical platform that are used to help secure our bank. You will also provide assistance to aid in the delivery of continuous improvements for all services within your team's portfolio.

Barclays is one of the world's largest and most respected financial institutions, with 329 years of success, quality and innovation behind us. We offer careers that provide endless opportunity - helping millions of individuals and businesses thrive, and creating financial and digital solutions that the world now takes for granted.

We are currently operating in a hybrid working environment, meaning that many colleagues spend part of their working hours at home and part in the office, depending on the nature of the role they are in. Please discuss the detail of the working pattern options for the role with the hiring manager.

What will you be doing?
• Participating and jointly taking responsibility for successful implementation of security operations requirements into solutions
• Analysing requirements, and driving the vision for various security product and design solutions, meeting user requirements for global security solutions
• Taking the lead on the design, development and delivery of product roadmaps to support the evolution of core security services, aligning deliveries to Barclays strategy
• Interacting with internal customers to resolve technical issues and provide guidance on the toolset and reporting
• Interacting with L2 resources to understand issues they have, and train them on: new operational activities, basic troubleshooting, and new repetitive tasks to hand over
• Suggesting improvements to key stakeholders and providing timely updates to management

What we're looking for:
• Strong knowledge of Splunk architecture, distributed components (indexer clusters, forwarders, search head clusters, deployment servers, DMCs), and the Linux operating system
• Strong knowledge of Splunk Enterprise Security at administration and use case level
• Strong interpersonal skills; role will require engagement with a varied and global internal customer base
• Documentation skills in order to provide high quality documentation for internal customers and technical teams

Skills that will help you in the role:
• Strong knowledge of data models, enrichment and automation
• Experience of other analytical tools and capabilities used in a Cyber Analytics: Elastic, Exabeam, Imperva, etc.
• Relevant professional certifications in information technology or cloud security e.g. CISSP, CCSP

Where will you be working?
You will be based in Radbroke, Knutsford. The Barclays Technology Campus just outside Manchester is our tech command centre and a vital strategic powerhouse behind our global operations. The campus is set in a 64 acre self-contained site, in a beautiful green environment and it offers unrivalled facilities for work and for play. We have an onsite gym, as well as outdoor tennis, football and cricket areas, as well as onsite restaurant and coffee shops.