Senior Data and Security Engineer
- Location
- Swansea, Wales, United Kingdom
field extractions mapped to OCSF, ensuring fast query performance and portable detection logic. Troubleshooting Pipeline Bottlenecks: Diagnose and resolve systemic transport failure modes: SQS/S3 ingestion lag, universal forwarder dropouts, unparsed JSON structures, Cribl pipeline backpressure, and source type schema mismatches. Advanced Log Management: Optimise log sources … Experience in supporting analysts in the creation of Splunk (SPL) detection rules. Data Tools & Protocols: Hands‐on experience with Cribl, Kinesis, S3 buckets, and SQS Queues. Understanding of OCSF schemas and data normalisation. Security Controls: Deep understanding of Zero Trust, identity‐first security, secrets management (KMS), and network segmentation. ...