Detection Engineer: Splunk Security Detections & Cloud

NCC Group; Manchester; On-site; GBP 35,000 - 55,000; Full time

Benefits offered by this job

Flexible Working

Generous Holiday Allowance

Medicash & Critical Illness Scheme

Financial & Investment Benefits

Community & Volunteering Programmes

Green Car Scheme

Cycle Scheme

Special Time Off

Family Planning

Job summary

NCC Group is seeking a Detection Engineer to enhance the security of their clients' environments. You will develop and maintain Splunk-based detections and analyze logs from various sources, ensuring robust security protocols.

The ideal candidate will bring experience in security detection engineering and familiarity with cloud security concepts. Enjoy a flexible working arrangement along with generous holiday allowances and benefits that support work-life balance.

Qualifications

• Experience with security detection engineering, SIEM engineering, threat hunting, or security monitoring.
• Familiarity with cloud security concepts such as IAM, KMS, security groups.
• Competence in using regex and basic scripting like Python or Bash.

Responsibilities

• Develop and maintain detections using Splunk SPL.
• Analyze logs from multiple sources for detection.
• Create detections for cloud security monitoring and incident response.

Skills

Splunk SPL or similar query language

Security detection engineering

Cloud audit logs

MITRE ATT&CK

Kubernetes or container security monitoring

Documentation using Jira, JSM, Confluence

Job description

NCC Group is seeking a Detection Engineer to enhance the security of their clients' environments. You will develop and maintain Splunk-based detections and analyze logs from various sources, ensuring robust security protocols.

The ideal candidate will bring experience in security detection engineering and familiarity with cloud security concepts. Enjoy a flexible working arrangement along with generous holiday allowances and benefits that support work-life balance.