Intec Select
Data Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Data Analytics Engineer | Splunk & Cribl | SIEM Pipelines
We're hiring a Data Analytics Engineer to lead the migration, optimisation and secure operation of log ingestion and observability pipelines, with a focus on moving log sources from Splunk ingestion to Cribl Stream/Edge.
The role
- Lead the migration of log sources to load-balanced, fault-tolerant Cribl pipelines
- Design and run resilient pipelines for high ingest volumes (Cribl worker groups, external load balancers, syslog distribution)
- Onboard, parse and tune security log sources (firewalls, EDR, cloud, authentication, proxies), using data reduction to cut Splunk ingest and storage costs without losing security coverage
- Build and maintain Cribl and Splunk configs: transformations, field normalisation, masking, enrichment
- Work with SOC, IR and threat detection teams so security logs reach the SIEM reliably and are tuned for detection
- Monitor and resolve pipeline and SIEM issues, and report on ingest reduction, cost savings, pipeline health and event loss
- Document log flows, pipeline topology and operational procedures
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What you'll bring
- Strong hands-on Splunk SIEM engineering (indexers, search heads, clustering, forwarders, CIM, performance optimisation)
- 2+ years with Cribl Stream/Edge, including distributed, load-balanced deployments
- Solid grasp of log transport (syslog, HEC, TCP, UDP) and balancing strategies in HA logging environments
- Proven experience onboarding and tuning security log sources for SOC/IR support
- Advanced SPL, data models, event parsing and alert tuning
- Scripting skills (Python, shell/CLI or similar) for pipeline management and validation
- Good troubleshooting skills and experience building monitoring dashboards
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Details:
- £650 - £750 P/D
- Initial 6-month contract role (strong likelihood to extend)
- Hybrid role (2-3 days P/W on-site)
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location