Security Engineer

Security Engineer (Contract) | £600-£650 per day, Inside IR35
Location: London

We’re recruiting for a hands-on Security Engineer to join a security team on an initial 6 month contract.

The immediate priority is migrating logs from Fluent Bit/QRadar to a Splunk service, running both SIEMs in parallel through cutover. Beyond that, you’ll support the wider team on a mix of security engineering projects and work with a third party on detection rules.

This is a broad engineering role, not a SIEM specialist or admin position.

What you’ll be doing:

Migrating log feeds to Splunk using intermediary shipping software, validating parsing, completeness and volumes before and after cutover
Writing and debugging Python and shell tooling for log collection, forwarding and validation
Onboarding and tuning log sources (firewalls, EDR, cloud, authentication, proxies)
Supporting detection rule and use case work alongside a third party
Working with SOC, IR and threat detection teams on log reliability and detection quality
Documenting log flows and operational procedures
What we’re looking for:

Strong hands-on security engineering experience across varied projects
Strong Linux skills and solid programming experience, including Python and debugging code
Security operations knowledge
Some SIEM experience (QRadar, Splunk or similar). QRadar isn’t essential, though QRadar migration experience is relevant
Experience with Fluent Bit or similar log forwarders
Understanding of log transport (syslog, TCP, UDP, API-based collection)
Comfortable working with third parties and the wider team
Details:

£600 - £650 P/D Inside IR35
Hybrid role - 3 days P/W onsite
Initial 6-Month contract
Nice to have: architecture or design experience, and Splunk exposure
Only candidates based in UK and eligible to work in UK are allowed