Robert Walters
Splunk / Elasticsearch Engineer - Cyber Data Platform
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Splunk / Elasticsearch Engineer - Cyber Data Platform
Location: Glasgow - three days per week onsite
Contract: 12 months
Who We Are
Robert Walters is the world's most trusted talent solutions business. Across the globe, we deliver recruitment, outsourcing, and talent advisory services for businesses of all sizes, opening doors for people with diverse skills, ambitions, and backgrounds.
The Role
Our client is a large multinational firm that provides a range of financial services, including advisory, investment, and asset management solutions. It serves a diverse set of clients worldwide, focusing on strategic planning, market operations, and long-term financial growth.
Responsibilities
- Operating and troubleshooting Splunk or Elasticsearch platforms.
- Onboarding new security data sources.
- Creating parsing rules, field extractions, and ingest pipelines.
- Building Splunk dashboards and supporting security analytics.
- Installing and configuring platform components.
- Supporting the migration from Splunk to Elasticsearch.
- Automating platform configuration using Ansible and Python.
- Diagnosing Linux, data-pipeline, and platform performance issues.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Essential experience
- At least three years' relevant engineering experience.
- Demonstrable hands-on experience with Splunk, Elasticsearch or the Elastic Stack.
- Experience onboarding, parsing, or managing data sources.
- Strong troubleshooting and production-support skills.
- An operational engineering mindset.
- Ability to work in Glasgow three days per week.
Particularly relevant skills
- Elasticsearch cluster installation, administration, and performance tuning.
- Splunk engineering, data onboarding, or dashboard development.
- Logstash, Beats, Kibana, or Elastic Common Schema.
- Linux system administration.
- Ansible automation and configuration management.
- Python scripting.
- Cybersecurity, SIEM, or large-scale log-data experience.
Financial services experience is not required. Candidates from cybersecurity, infrastructure, platform engineering, observability, or other large-scale data environments will be considered.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
The interview process
The interview process consists of two stages, with the second held onsite in Glasgow. Please note that candidates must have access to a personal device when working outside the office.
Equal Opportunities
We are committed to creating an inclusive recruitment experience. If you require support or adjustments to the recruitment process, our Adjustment Concierge Service is here to help. Please feel free to contact us at adjustments@robertwalters.com to discuss how we can support you.
This position is being recruited on behalf of our client through our Outsourcing service line. Resource Solutions Limited, trading as Robert Walters, acts as an employment business and agency, partnering with top organizations to help them find the best talent. We welcome applications from all candidates and are committed to providing equal opportunities.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills