25 of 25 Search Processing Language Jobs in the UK

SOAR Engineer, or similar security automation role. Strong hands‐on experience developing and managing Splunk SOAR playbooks. Solid understanding of Splunk platform architecture, including: Search heads, indexers, forwarders Data ingestion and performance considerations Strong experience using Splunk SPL (Search Processing Language). Experience integrating Splunk SOAR ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

Splunk and AWS security monitoring experience who enjoys both hands-on threat analysis and detection development. Key Responsibilities Detection Engineering Develop, test, and optimise Splunk SPL correlation searches and alerting logic. Create and maintain detection use cases aligned to attacker tactics, techniques, and procedures (TTPs). Build AWS-focused detections ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

Mindset : Proactive problem solver who champions automation-first, CI/CD pipelines, code reviews, and self-service enablement. Modern Observability & Telemetry: Strong background in Splunk (SPL, dashboards, alerts, data ingestion, forwarders) and also configuring OpenTelemetry collectors and pipelines; knowledge of Prometheus and Grafana or similar tools. Kubernetes (Power User): Strong ...

operational resilience across complex environments. Key Responsibilities Manage and optimise security log ingestion pipelines using Cribl and cloud-native technologies. Support the collection and processing of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity. Build and maintain security data models, field extractions ...

pipeline health and event loss Document log flows, pipeline topology and operational procedures What you'll bring Strong hands-on Splunk SIEM engineering (indexers, search heads, clustering, forwarders, CIM, performance optimisation) 2+ years with Cribl Stream/Edge, including distributed, load-balanced deployments Solid grasp of log transport (syslog ...

broader suite of Splunk-related products and integrations. Advanced knowledge of multi-tier Splunk architectures, clustering, and scalability topics. Strong proficiency in Splunk Processing Language (SPL). Demonstrated ability in technical consulting or big-data analytics. Thorough understanding of Splunk Deployment Methodology and Implementation. Excellent communication skills with ...

Lead Threat Detection Engineer| London | Up to £120k + Bonus I'm working with a leading global fintech on a senior hire into a newly established security function. This is a hands-on role for ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

Hackney, United Kingdom | Posted on 03/06/2026 At Civic Recruitment and Limited, we know that individuals are more than just fixed expenses; they are the cornerstone of every thriving organisation. That’s ...

We are looking for an experienced SC cleared Senior SOC Engineer to join a busy Team. You will have had a minimum of 5 years experience working within a SOC environment with experience mentoring more ...

Senior SOC Detection Engineer 6-Month Contract Location: Leamington Spa/Manchester/Warrington Working Pattern: Hybrid, 3 days onsite Contract Duration: 6 months Positions Available: 3 The Role We are looking for experienced SOC ...

Network Splunk Developer £550 per day | 12-month contract | Chester | Hybrid 3 days per week We are looking for an experienced Network Splunk Developer to join a large enterprise network environment, supporting telemetry, monitoring and ...

Network Splunk Developer £550 per day | 12-month contract | Chester | Hybrid 3 days per week We are looking for an experienced Network Splunk Developer to join a large enterprise network environment, supporting telemetry, monitoring and ...

Network Splunk Developer £550 per day | 12-month contract | Chester | Hybrid 3 days per week We are looking for an experienced Network Splunk Developer to join a large enterprise network environment, supporting telemetry, monitoring and ...

SOC Detection Engineer Location: Leamington Spa, Manchester or Warrington Contract: 6 months Working Pattern: Hybrid - 3 days in the office, 2 days remotely I'm recruiting for a SOC Detection Engineer to strengthen threat detection ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, knowledge and expertise or Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security ...

Security Analyst 6-month contract, Outside IR35, Fully Remote - Must be UK based We're seeking an experienced Security Analyst to support a major technology transformation programme. You'll help maintain security visibility throughout infrastructure ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key Responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, Knowledge & Expertise Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. or Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security, secrets ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key Responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, Knowledge & Expertise Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. or Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security, secrets ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key Responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, Knowledge & Expertise Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. or Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security, secrets ...