Security Engineer

Security Engineer (Contract) | £600-£650 per day, Inside IR35 Location: London We’re recruiting for a hands-on Security Engineer to join a security team on an initial 6 month contract. The immediate priority is migrating logs from Fluent Bit/QRadar to a Splunk service, running both SIEMs in parallel through cutover. Beyond that, you’ll support the wider team on a mix of security engineering projects and work with a third party on detection rules. This is a broad engineering role, not a SIEM specialist or admin position. What you’ll be doing: Migrating log feeds to Splunk using intermediary shipping software, validating parsing, completeness and volumes before and after cutover Writing and debugging Python and shell tooling for log collection, forwarding and validation Onboarding and tuning log sources (firewalls, EDR, cloud, authentication, proxies) Supporting detection rule and use case work alongside a third party Working with SOC, IR and threat detection teams on log reliability and detection quality Documenting log flows and operational procedures What we’re looking for: Strong hands-on security engineering experience across varied projects Strong Linux skills and solid programming experience, including Python and debugging code Security operations knowledge Some SIEM experience (QRadar, Splunk or similar). QRadar isn’t essential, though QRadar migration experience is relevant Experience with Fluent Bit or similar log forwarders Understanding of log transport (syslog, TCP, UDP, API-based collection) Comfortable working with third parties and the wider team Details: £600 - £650 P/D Inside IR35 Hybrid role - 3 days P/W onsite Initial 6-Month contract Nice to have: architecture or design experience, and Splunk exposure