Назад
Company hidden
9 дней назад

Senior Data and Security Engineer (Cybersecurity)

55 000 - 85 000GBP
Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Data and Security Engineer (Cybersecurity): Building and optimising secure, high-volume streaming data pipelines and SIEM detection capabilities for UK public sector services with an accent on AWS telemetry, Cribl processing, Splunk data models, and operational compliance. Focus on diagnosing ingestion bottlenecks, normalising security data to OCSF, developing high-fidelity detection logic, and enforcing encryption and least-privilege controls.

Location: Any UK office hub: Bristol, London, Manchester, or Swansea. Part-time remote working is available, but eligibility for SC clearance requires five years of UK residency and employment history or full-time education history. Occasional work outside standard Monday–Friday hours may be required during release, maintenance, or client operating windows.

Salary: £55,000–£85,000 per year

Company

hirify.global delivers digital and security services for UK public sector clients whose services are used by millions of people.

What you will do

  • Manage and optimise log ingestion, enrichment, routing, filtering, and normalisation pipelines on Cribl Cloud and Cribl Stream.
  • Support the flow and integrity of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity.
  • Build and maintain Splunk data models, accelerated searches, field extractions, and OCSF-aligned schemas.
  • Diagnose ingestion failures, pipeline backpressure, schema mismatches, forwarding issues, and other transport bottlenecks.
  • Manage streaming and security data storage using Kinesis, S3, Amazon Security Lake, and hot, warm, and cold data tiers.
  • Develop and tune SIEM and EDR detection logic while monitoring signal-to-noise ratios and rule quality.

Requirements

  • Senior-level hands-on experience designing and securing AWS cloud infrastructure; Azure and Google Cloud experience is beneficial.
  • Experience supporting Splunk SPL detection rule development and working with SIEM platforms.
  • Practical experience with Cribl, Kinesis, S3, SQS, streaming data pipelines, and OCSF-based data normalisation.
  • Strong understanding of Zero Trust, identity-first security, secrets management, KMS, TLS, encryption, and network segmentation.
  • Previous experience working with or alongside UK Government Civil Servants and understanding of public sector security assurance requirements.
  • Eligibility for UK SC security clearance is required, including five years of UK residency and employment or education history.

Nice to have

  • Experience with Azure and Google Cloud Platform.
  • Experience working with UK government security forums or emerging public sector security practices.

Culture & Benefits

  • Work in multidisciplinary teams with delivery managers, analysts, engineers, and architects.
  • Structured career development and communities of practice.
  • Support for external engagement, including security forums, speaking events, and thought leadership.
  • 30 days of paid annual leave and flexible parental leave.
  • Part-time remote working, paid counselling, financial and legal advice, and a 7% employer-matched pension.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →