Security Engineer (Contract) | £600-£650 per day, Inside IR35

Location: London

We’re recruiting for a hands-on Security Engineer to join a security team on an initial 6 month contract.

The immediate priority is migrating logs from Fluent Bit/QRadar to a Splunk service, running both SIEMs in parallel through cutover. Beyond that, you’ll support the wider team on a mix of security engineering projects and work with a third party on detection rules.

This is a broad engineering role, not a SIEM specialist or admin position.

What you’ll be doing:

Migrating log feeds to Splunk using intermediary shipping software, validating parsing, completeness and volumes before and after cutover

Writing and debugging Python and shell tooling for log collection, forwarding and validation

Onboarding and tuning log sources (firewalls, EDR, cloud, authentication, proxies)

Supporting detection rule and use case work alongside a third party

Working with SOC, IR and threat detection teams on log reliability and detection quality

Documenting log flows and operational procedures

What we’re looking for:

Strong hands-on security engineering experience across varied projects

Strong Linux skills and solid programming experience, including Python and debugging code

Security operations knowledge

Some SIEM experience (QRadar, Splunk or similar). QRadar isn’t essential, though QRadar migration experience is relevant

Experience with Fluent Bit or similar log forwarders

Understanding of log transport (syslog, TCP, UDP, API-based collection)

Comfortable working with third parties and the wider team

Details:

£600 - £650 P/D Inside IR35

Hybrid role - 3 days P/W onsite

Initial 6-Month contract

Nice to have: architecture or design experience, and Splunk exposure