Splunk/Elasticsearch Engineer - Cyber Data Platform

Splunk/Elasticsearch Engineer - Cyber Data Platform

Location: Glasgow - three days per week onsite
Contract: 12 months

Splunk or Elasticsearch experience is essential

Who We Are

Robert Walters is the world's most trusted talent solutions business. Across the globe, we deliver recruitment, outsourcing, and talent advisory services for businesses of all sizes, opening doors for people with diverse skills, ambitions, and backgrounds.

The Role

Our client is a large multinational firm that provides a range of financial services, including advisory, investment, and asset management solutions. It serves a diverse set of clients worldwide, focusing on strategic planning, market operations, and long-term financial growth.

Responsibilities include:

• Operating and troubleshooting Splunk or Elasticsearch platforms.
• Onboarding new security data sources
• Creating parsing rules, field extractions, and ingest pipelines.
• Building Splunk dashboards and supporting security analytics.
• Installing and configuring platform components.
• Supporting the migration from Splunk to Elasticsearch.
• Automating platform configuration using Ansible and Python.
• Diagnosing Linux, data-pipeline and platform performance issues.

Essential experience

• At least three years' relevant engineering experience.
• Demonstrable hands-on experience with Splunk, Elasticsearch or the Elastic Stack.
• Experience onboarding, parsing or managing data sources.
• Strong troubleshooting and production-support skills.
• An operational engineering mindset.
• Ability to work in Glasgow three days per week.

Particularly relevant skills

• Elasticsearch cluster installation, administration and performance tuning.
• Splunk engineering, data onboarding or dashboard development.
• Logstash, Beats, Kibana or Elastic Common Schema.
• Linux system administration.
• Ansible automation and configuration management.
• Python Scripting.
• Cybersecurity, SIEM or large-scale log-data experience.

Financial services experience is not required. Candidates from cybersecurity, infrastructure, platform engineering, observability or other large-scale data environments will be considered.

The interview process consists of two stages, with the second held onsite in Glasgow.

Please note that candidates must have access to a personal device when working outside the office.

We are committed to creating an inclusive recruitment experience. If you require support or adjustments to the recruitment process, our Adjustment Concierge Service is here to help. Please feel free to contact us at (see below) to discuss how we can support you.

This position is being recruited on behalf of our client through our Outsourcing service line. Resource Solutions Limited, trading as Robert Walters, acts as an employment business and agency, partnering with top organizations to help them find the best talent. We welcome applications from all candidates and are committed to providing equal opportunities.