Security Delivery Manager

What You’ll Do SIEM & Logging Delivery Lead end-to-end delivery of log-source assessment, onboarding and validation into enterprise SIEM platforms, with Splunk preferred. Define and govern logging requirements aligned with security monitoring, detection and investigation use cases. Oversee log onboarding activities including source identification, ingestion, parsing, field extraction, normalization and validation. Assess log sources for quality, completeness, consistency and security value, identifying gaps and recommending remediation. Ensure required security events and fields are captured accurately and made available to monitoring and detection teams. Technical & Delivery Leadership Provide technical direction and troubleshooting support for complex log ingestion, parsing, mapping and data-quality issues. Apply strong knowledge of common logging formats and protocols, including syslog, JSON, Windows Event Logs and application logs. Drive consistent approaches to data normalization and standardization across diverse technology environments. Understand how telemetry supports detection engineering and collaborate with detection teams to ensure logs meet defined use-case requirements. Coordinate dependencies across application, infrastructure, platform and cybersecurity teams to enable required logging. Lead delivery through batch-based, wave-based or phased onboarding approaches, balancing delivery priorities, dependencies and technical readiness. Service Management & Governance Own delivery planning, progress tracking, risks, issues, dependencies and stakeholder reporting for assigned logging initiatives. Establish clear quality criteria and ensure onboarding outputs meet agreed technical and operational requirements. Produce high-quality assessments, onboarding documentation, status reporting and management-level updates. Facilitate working sessions with technical teams and stakeholders to resolve blockers and maintain delivery momentum. Identify opportunities to improve onboarding processes, logging standards, operational efficiency and monitoring coverage. Act as a trusted point of coordination between cybersecurity teams and technology stakeholders. What You’ll Need Strong hands-on understanding of SIEM technologies, preferably Splunk. Demonstrated experience with log onboarding, ingestion pipelines, parsing and field extraction. Strong understanding of security logging across operating systems, applications, network devices and security technologies. Knowledge of common log formats and protocols such as syslog, JSON and Windows events. Experience assessing and improving log quality, completeness and consistency. Experience defining logging requirements against security monitoring and detection use cases. Working knowledge of detection engineering and the role telemetry plays in effective security detections. Understanding of security-data normalization, standardization and mapping practices. Strong analytical and troubleshooting capabilities, particularly for ingestion and data-quality issues. Experience coordinating with application, infrastructure, platform and security teams. Demonstrated experience managing structured, phased or batch-based technology delivery. Strong documentation, reporting and presentation capabilities. Excellent stakeholder management and communication skills, with the ability to translate technical issues into clear business and delivery impacts. Bonus Points If You Have Experience delivering SIEM or security-monitoring capabilities in large-scale enterprise environments. Experience with Splunk administration, SPL, data models or Common Information Model concepts. Exposure to SOC operations, threat detection, incident investigation or threat hunting. Experience working with cloud and hybrid environments. Familiarity with MITRE ATT&CK and security monitoring frameworks. Relevant cybersecurity, SIEM, Splunk or service-management certifications. Experience operating within a Managed Security Services environment.

Desired Candidate Profile

Company Industry IT - Software Services