Job description
Project overview
Security Engineer (Contract) | £600-£650 per day, Inside IR35
Nice to have
architecture or design experience, and Splunk exposure
Project details
London
We're recruiting for a hands-on Security Engineer to join a security team on an initial 6 month contract.
The immediate priority is migrating logs from Fluent Bit/QRadar to a Splunk service, running both SIEMs in parallel through cutover. Beyond that, you'll support the wider team on a mix of security engineering projects and work with a third party on detection rules.
This is a broad engineering role, not a SIEM specialist or admin position.
What you'll be doing:
What we're looking for:
- Migrating log feeds to Splunk using intermediary shipping software, validating parsing, completeness and volumes before and after cutover
- Writing and debugging Python and Shell tooling for log collection, forwarding and validation
- Onboarding and tuning log sources (firewalls, EDR, cloud, authentication, proxies)
- Supporting detection rule and use case work alongside a third party
- Working with SOC, IR and threat detection teams on log reliability and detection quality
- Documenting log flows and operational procedures
- Strong hands-on security engineering experience across varied projects
- Strong Linux skills and solid programming experience, including Python and debugging code
- Security operations knowledge
- Some SIEM experience (QRadar, Splunk or similar). QRadar isn't essential, though QRadar migration experience is relevant
- Experience with Fluent Bit or similar log forwarders
- Understanding of log transport (syslog, TCP, UDP, API-based collection)
- Comfortable working with third parties and the wider team
- £600
- £650 P/D Inside IR35
- Hybrid role
- 3 days P/W onsite
- Initial 6-Month contract
- Start: 2026-10-18 00:00:00
- Duration: 6.0 MONTH
- Location: London, UK, GB
- Rate: 75-81 EUR/h
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on JobServe