24 of 24 Search Processing Language Jobs in the UK

skills and experience Strong practical experience as a Performance Analyst, rather than solely a Data Analyst. Demonstrable experience using SQL and/or Splunk Search Processing Language (SPL). Strong analytical, problem-solving and critical-thinking skills. Ability to proactively identify and investigate performance issues within teams. ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

Mindset : Proactive problem solver who champions automation-first, CI/CD pipelines, code reviews, and self-service enablement. Modern Observability & Telemetry: Strong background in Splunk (SPL, dashboards, alerts, data ingestion, forwarders) and also configuring OpenTelemetry collectors and pipelines; knowledge of Prometheus and Grafana or similar tools. Kubernetes (Power User): Strong ...

Cleared) £550-£600 per day (Inside IR35) | 3-Month Contract | Remote (UK) | Active SC Clearance Required We're supporting a leading consultancy in the search for an experienced SOC Analyst to join their Cyber Security team on an initial 3-month contract . This is a fully remote opportunity … ensure monitoring requirements are translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content ...

knew well, an on‐call rotation, a service that was yours to keep healthy. You are comfortable in Linux, in at least one query language, and you have written scripts that did something useful. Python is what we mostly use; anything credible is a fine starting point. You have ...

Senior SOC Analyst Location: London Working Pattern: 4 days onsite, 1 day remote Hours: Monday-Friday, standard business hours (no shift work) Overview We are seeking an experienced Senior SOC Analyst to support a major ...

Hackney, United Kingdom | Posted on 03/06/2026 At Civic Recruitment and Limited, we know that individuals are more than just fixed expenses; they are the cornerstone of every thriving organisation. That’s ...

Availability: Immediate Employment Type: Full-Time, Permanent Contract Preferred Security Clearance: SC Sector: Diverse Public/Private Sectors Location: Remote Work; occasional client visits required across the UK. Eligibility: Open to UK Nationals only. Overview ...

Job Title: Cyber Security Ops. Professional (Shift) Req ID: 63281 Job Function: Cyber Security Posting Start Date: 05/11/2026 Posting End Date: 17/11/2026 Division: UK Business Job Location ...

Job Title: Cyber Security Ops. Professional (Shift) Req ID: 63281 Job Function: Cyber Security Posting Start Date: 05/11/2026 Posting End Date: 17/11/2026 Division: UK Business Job Location ...

Job Title: Cyber Security Ops. Professional (Shift) Req ID: 63281 Job Function: Cyber Security Posting Start Date: 05/11/2026 Posting End Date: 17/11/2026 Division: UK Business Job Location ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands-on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, knowledge and expertise or Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security ...

Security Analyst 6-month contract, Outside IR35, Fully Remote - Must be UK based We're seeking an experienced Security Analyst to support a major technology transformation programme. You'll help maintain security visibility throughout infrastructure ...

Senior SOC Analyst - AI, Linux, macOS, Splunk- London (onsite) - 6 months rolling - Inside We need an experienced Senior SOC Analyst/IR Specialist to hit the ground running in a fast-paced Central London SOC ...