12 of 12 Search Processing Language Jobs in the UK excluding London

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

Cleared) £550-£600 per day (Inside IR35) | 3-Month Contract | Remote (UK) | Active SC Clearance Required We're supporting a leading consultancy in the search for an experienced SOC Analyst to join their Cyber Security team on an initial 3-month contract . This is a fully remote opportunity … ensure monitoring requirements are translated into effective detections. This role requires strong hands-on experience with Microsoft Sentinel, security telemetry and Kusto Query Language (KQL), alongside the ability to work autonomously within a fast-paced cyber security environment. Key Responsibilities Develop, test, deploy and maintain Microsoft Sentinel detection content ...

Availability: Immediate Employment Type: Full-Time, Permanent Contract Preferred Security Clearance: SC Sector: Diverse Public/Private Sectors Location: Remote Work; occasional client visits required across the UK. Eligibility: Open to UK Nationals only. Overview ...

Job Title: Cyber Security Ops. Professional (Shift) Req ID: 63281 Job Function: Cyber Security Posting Start Date: 05/11/2026 Posting End Date: 17/11/2026 Division: UK Business Job Location ...

Job Title: Cyber Security Ops. Professional (Shift) Req ID: 63281 Job Function: Cyber Security Posting Start Date: 05/11/2026 Posting End Date: 17/11/2026 Division: UK Business Job Location ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands-on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...