7 of 7 Search Processing Language Jobs in London

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

pipeline health and event loss Document log flows, pipeline topology and operational procedures What you'll bring Strong hands-on Splunk SIEM engineering (indexers, search heads, clustering, forwarders, CIM, performance optimisation) 2+ years with Cribl Stream/Edge, including distributed, load-balanced deployments Solid grasp of log transport (syslog ...

alerts. Ability to translate high-volume monitoring data into targeted, actionable security alerts. Experience developing operational dashboards and management reporting. Strong documentation skills, including search documentation, operational procedures and runbooks. Ability to work independently, manage technical improvements and transfer knowledge to junior analysts. Expected Deliverables Improved DLP monitoring dashboards ...