Principal LogPoint (Guardsix) SIEM Consultant

An opportunity has arisen for a highly experienced SIEM/SOAR specialist to join a major security transformation programme within a complex enterprise environment. We are seeking a Senior or Principal-level consultant with deep expertise in LogPoint (now Guardsix) to support the ongoing development and enhancement of a large-scale security monitoring and automation platform. This role will suit someone who enjoys taking technical ownership, solving complex security challenges and driving best practice across SIEM, SOAR and detection engineering functions. You will be responsible for shaping and developing the organisation's Guardsix platform, ensuring effective collection, processing and analysis of security telemetry while improving detection capabilities and incident response automation. Key Info Remote Position (Occasional Meetings in Gothenburg, Sweden) Contract until end of May 2027 Key responsibilities include:

• Designing, configuring and enhancing the Guardsix / LogPoint SIEM and SOAR environment.
• Onboarding and integrating logs from applications, infrastructure, cloud services and security technologies.
• Developing SIEM use cases, correlation rules, detections and alerting capabilities.
• Building SOAR playbooks and automated response workflows.
• Integrating EDR, NDR and wider security tooling into the platform.
• Creating dashboards, visualisations and operational monitoring views.
• Improving log parsing, normalisation and enrichment processes.
• Establishing best practices for detection engineering and platform governance.
• Producing technical documentation and supporting knowledge transfer activities.

Required Experience To be successful, you will demonstrate:

• Significant experience working with LogPoint / Guardsix in enterprise environments.
• Proven SIEM engineering and architecture experience.
• Hands-on SOAR implementation and automation expertise.
• Strong detection engineering experience, including correlation rules, use cases and threat detection content development.
• Expertise in integrating enterprise security tooling, particularly EDR and NDR solutions.
• Experience onboarding, parsing and managing high-volume log sources.
• The ability to operate as a technical SME with minimal supervision.
• Excellent stakeholder engagement, documentation and communication skills.

Desirable Experience

• Previous experience as a Principal Consultant, Lead SIEM Engineer, SIEM Architect, Security Architect or LogPoint SME.
• Experience delivering large-scale SIEM or SOC transformation programmes.
• Experience within highly regulated or complex enterprise environments.

By applying for this role, you consent to SGI contacting you by telephone regarding recruitment services, market updates, and relevant business opportunities We believe in equal opportunity for all and actively encourage applications from diverse backgrounds, experiences, and perspectives. Source Group International Ltd is acting as an Employment Business in relation to this vacancy