Senior Data and Security Engineer (Cybersecurity)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Location: Any UK office hub: Bristol, London, Manchester, or Swansea. Part-time remote working is available, but eligibility for SC clearance requires five years of UK residency and employment history or full-time education history. Occasional work outside standard Monday–Friday hours may be required during release, maintenance, or client operating windows.
Salary: £55,000–£85,000 per year
Company
delivers digital and security services for UK public sector clients whose services are used by millions of people.
What you will do
- Manage and optimise log ingestion, enrichment, routing, filtering, and normalisation pipelines on Cribl Cloud and Cribl Stream.
- Support the flow and integrity of AWS security telemetry, including CloudTrail, VPC Flow Logs, GuardDuty, EKS audit logs, and IAM activity.
- Build and maintain Splunk data models, accelerated searches, field extractions, and OCSF-aligned schemas.
- Diagnose ingestion failures, pipeline backpressure, schema mismatches, forwarding issues, and other transport bottlenecks.
- Manage streaming and security data storage using Kinesis, S3, Amazon Security Lake, and hot, warm, and cold data tiers.
- Develop and tune SIEM and EDR detection logic while monitoring signal-to-noise ratios and rule quality.
Requirements
- Senior-level hands-on experience designing and securing AWS cloud infrastructure; Azure and Google Cloud experience is beneficial.
- Experience supporting Splunk SPL detection rule development and working with SIEM platforms.
- Practical experience with Cribl, Kinesis, S3, SQS, streaming data pipelines, and OCSF-based data normalisation.
- Strong understanding of Zero Trust, identity-first security, secrets management, KMS, TLS, encryption, and network segmentation.
- Previous experience working with or alongside UK Government Civil Servants and understanding of public sector security assurance requirements.
- Eligibility for UK SC security clearance is required, including five years of UK residency and employment or education history.
Nice to have
- Experience with Azure and Google Cloud Platform.
- Experience working with UK government security forums or emerging public sector security practices.
Culture & Benefits
- Work in multidisciplinary teams with delivery managers, analysts, engineers, and architects.
- Structured career development and communities of practice.
- Support for external engagement, including security forums, speaking events, and thought leadership.
- 30 days of paid annual leave and flexible parental leave.
- Part-time remote working, paid counselling, financial and legal advice, and a 7% employer-matched pension.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →