Hire a senior SIEM engineer directly. No agency. No markup.
Adam Musa is a platform-agnostic SIEM specialist with 10+ years of enterprise experience across Sentinel, QRadar, Splunk, and Elastic. Available for direct B2B contracts globally via UK Ltd or US LLC. You keep the agency margin.
Platform expertise
Expert across all four major SIEM stacks
Most contractors specialise in one platform. Adam brings senior-level expertise across all four — whichever SIEM your environment runs, he can hit the ground running from day one.
Microsoft Sentinel
8+ years · Primary platform
IBM QRadar
6+ years · Primary platform
Splunk ES
5+ years · Primary platform
Elastic / Kibana
4+ years · Primary platform
Employment history
Enterprise track record
Jan 2026 – Mar 2026
Senior SIEM Engineer
BT — UK
Led Elastic Security detection engineering at enterprise scale. Designed Logstash pipelines, built EQL detection rules aligned to MITRE ATT&CK, resolved data quality issues across multi-cluster environments.
May 2024 – Dec 2025
Sentinel SIEM Engineer
Charles River Associates — USA (Remote)
Led Sentinel implementation and optimisation. Designed SOAR automation workflows, built Power BI security dashboards, delivered phishing simulation campaigns, automated operations using Python and PowerShell.
Oct 2023 – Apr 2024
CSIRT Lead
Hilti — Switzerland
Led enterprise MDE deployment across global endpoints. Built Defender XDR detections and automated response — reducing IR time by 40%. Implemented Azure Logic Apps automation.
Nov 2022 – Sep 2023
CSIRT Lead / SOC Engineer
PA Consulting — UK
Led Sentinel implementation delivering SIEM and SOAR. Designed MFA and Conditional Access policies, coordinated high and critical incident response, delivered SOC 2 and ISO 27001 aligned controls.
Nov 2021 – Nov 2022
Tier 3 SOC Analyst
IBM — UK
Tier 3 escalation lead using IBM QRadar. Led high-severity incident investigations, tuned correlation rules, conducted threat hunting across network, endpoint, and cloud telemetry.
Jul 2020 – Nov 2021
Incident Response Analyst — Tier 3 SOC
Ford Motor Company
Advanced incident response and digital forensics using EnCase and Volatility. Led threat hunting using CrowdStrike and FireEye HX, developed SOAR playbooks in Splunk Phantom, conducted malware analysis.
Dec 2018 – Sep 2019
Senior SIEM Engineer
BT — UK
Led SIEM migration from ArcSight to McAfee for the Emergency Services Network (ESN). Developed and tuned detection use cases, managed log source onboarding, acted as Network Security Architect SME.
Certifications
Qualifications & credentials
GIAC Certified Incident Handler (GCIH)
GIAC · 2023
ISO 27001 Certified ISMS
2014
GCTI
SANS / IBM · 2018
CompTIA Security+
2017
Microsoft Azure Security Engineer
In progress · 2025
White Hat Hacking
2013
NSE 2
Fortinet · 2020
MSc Information Security
Bedfordshire · 2013 (Merit)
Global availability
Where Adam works and how
United Kingdom
United KingdomiCore Fusion Ltd
Remote · Hybrid · Onsite
Outside IR35 · rate on request
United States
United StatesiCore Fusion LLC
Remote only · Corp-to-Corp
Corp-to-Corp · rate on request
Canada
CanadaiCore Fusion LLC
Remote only · B2B
Rate on request
Australia
AustraliaiCore Fusion Ltd / LLC
Remote only · B2B
Rate on request
Europe
EuropeiCore Fusion Ltd
Remote only · B2B
Rate on request
Middle East
iCore Fusion Ltd
Remote or onsite
Tax-free package · negotiable
How to engage
Getting started — four steps
- 1
Send a direct message
Email hello@icorefusion.com or message on LinkedIn with a brief description of the role, platform, location, and expected duration. No lengthy forms. No agency involved. Adam responds personally.
Response within 4–8 business hours
- 2
30-minute discovery call
A direct conversation with Adam to confirm the scope, platform, start date, rate, and working arrangement. No intermediary. No recruiter listening in. You speak to the engineer from minute one.
Typically within 24–48 hours of initial contact
- 3
Statement of work & contract
iCore Fusion issues a clean B2B contract — UK Ltd for UK and European clients, US LLC for US, Canadian, and Australian clients. Standard vendor onboarding documentation provided on request including W-9 for US engagements.
Contract issued within 24 hours of agreement
- 4
Start date confirmed — immediate availability
Adam is available to start immediately or on a date that suits your project timeline. Remote onboarding takes one business day. For onsite UK engagements, travel can be arranged within 48 hours of contract signature.
Immediate start available · June 2026
Common questions
FAQs from hiring managers
Can you work outside IR35?
Yes. iCore Fusion Ltd is a UK limited company and Adam operates as a genuine B2B contractor. For roles assessed as outside IR35, engagements are structured directly with iCore Fusion Ltd. For roles inside IR35, umbrella arrangements can be discussed.
Can you work Corp-to-Corp for US engagements?
Yes. iCore Fusion LLC is a Wyoming-registered US entity. US clients can engage directly Corp-to-Corp without needing an agency or employer of record. Standard W-9 and vendor documentation provided on request.
What is your notice period or availability?
Immediate start available as of June 2026. For ongoing contracts, standard notice period is two weeks unless otherwise agreed in the statement of work.
Do you work with agencies or only direct?
Both — but direct is preferred and always cheaper for you. iCore Fusion works directly with clients wherever possible. If your procurement process requires an agency, Adam can be engaged through a preferred supplier.
What platforms have you worked on most recently?
Elastic Security at BT (Jan–Mar 2026) and Microsoft Sentinel at Charles River Associates (May 2024–Dec 2025). Both at senior engineering level. QRadar and Splunk from earlier enterprise roles at IBM and Ford Motor Company.
Can a contract lead to a permanent hire?
Yes — and we actively support this. iCore Fusion offers a formal contract-to-hire pathway. After a minimum 6-month engagement, if both parties want to transition to a permanent arrangement, iCore Fusion supports the handover. A conversion fee applies.
What languages do you work in?
English and French — both fluent. Adam has delivered engagements across the UK, Switzerland, and USA and is comfortable working in international team environments.
Ready to start the conversation?
No agency. No forms. No waiting room. Send a direct message and Adam responds personally — usually within a few hours.