Security Engineer
Summary
Hands-on security engineer on a six-month Inside-IR35 contract (hybrid, 3 days onsite) with a London security team, migrating log feeds from Fluent Bit/QRadar to Splunk. Writes Python/shell tooling for log collection and validation, tunes log sources, and supports detection work with SOC/IR teams.
Salary: £? - ? per year
Requirements:- Strong hands-on security engineering experience across varied projects
- Strong Linux skills and solid programming experience, including Python and code debugging
- Security operations knowledge
- Some SIEM experience, such as QRadar, Splunk or similar; QRadar is not essential, but QRadar migration experience is relevant
- Experience with Fluent Bit or similar log forwarders
- Understanding of log transport, including syslog, TCP, UDP and API-based collection
- Comfortable working with third parties and the wider team
- Nice to have: architecture or design experience, and Splunk exposure
- Migrate log feeds to Splunk using intermediary shipping software, validating parsing, completeness and volumes before and after cutover
- Write and debug Python and shell tooling for log collection, forwarding and validation
- Onboard and tune log sources, including firewalls, EDR, cloud, authentication and proxies
- Support detection rule and use case work alongside a third party
- Work with SOC, IR and threat detection teams on log reliability and detection quality
- Document log flows and operational procedures
- API
- Cloud
- Support
- Linux
- Python
- Security
- Splunk
More:
Were recruiting a hands-on Security Engineer to join a security team in London on an initial six-month contract. The immediate priority is migrating logs from Fluent Bit/QRadar to a Splunk service, with both SIEMs running in parallel through cutover. The role also supports wider security engineering projects and work with a third party on detection rules. This is a broad engineering role, not a SIEM specialist or administrator position. The contract pays £600–£650 per day, Inside IR35, and is hybrid with three days per week onsite.
last updated 42 week of 2026