5 of 5 Remote/Hybrid Search Processing Language Jobs in the UK excluding London

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

CloudTrail management and data events, VPC Flow Logs, GuardDuty findings, EKS/container audit logs, and IAM activity) into the centralised log architecture. Stream Processing & Pipeline Optimisation (Cribl Stream): Leverage stream processing (ideally Cribl) to parse, route, mask sensitive fields, and filter out high-volume, low-value debug … securing cloud infrastructures within AWS, and ideally with Azure and Google Cloud Platform. SIEM & Detection: Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls ...

SOC Detection Engineer Location: Leamington Spa, Manchester or Warrington Contract: 6 months Working Pattern: Hybrid - 3 days in the office, 2 days remotely I'm recruiting for a SOC Detection Engineer to strengthen threat detection ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key Responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, Knowledge & Expertise Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. or Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security, secrets ...

This is a delivery role: security assurance should speed decisions up, not slow them down. Key Responsibilities Detection Engineering Build & tune: detection rules across Splunk (SPL), YARA and EDR platforms. Coverage & quality: map detections to MITRE ATT&CK; track signal-to-noise and false-positive rates to keep alerting high … technical point of contact across teams. Skills, Knowledge & Expertise Hands-on cloud security experience — AWS, Azure, or GCP. Either: Advanced Splunk (SPL); YARA, and EDR detection logic. or Experience with Cribl, Kinesis, S3, Amazon Security Lake, and OCSF/data normalisation. Strong grasp of Zero Trust, identity-first security, secrets ...