8 of 8 Remote/Hybrid Search Processing Language Jobs in England

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

SOC Detection Engineer Location: Leamington Spa, Manchester or Warrington Contract: 6 months Working Pattern: Hybrid - 3 days in the office, 2 days remotely I'm recruiting for a SOC Detection Engineer to strengthen threat detection ...

Security Analyst 6-month contract, Outside IR35, Fully Remote - Must be UK based We're seeking an experienced Security Analyst to support a major technology transformation programme. You'll help maintain security visibility throughout infrastructure ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key Responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, Knowledge & Expertise Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. or Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security, secrets ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key Responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, Knowledge & Expertise Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. or Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security, secrets ...