Hybrid Cribl & Splunk Observability Engineer

Intec Select Ltd; Greater London; Hybrid; GBP 120,000 - 138,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Intec Select Ltd in London is seeking a Data Analytics Engineer to lead the migration and optimisation of log ingestion and observability pipelines, focusing on moving sources from Splunk to Cribl Stream/Edge.

You will design resilient pipelines for high ingest volumes, onboard and tune security log sources for SOC/IR, and build Cribl and Splunk configurations to reduce costs while preserving security coverage.

Qualifications

• 2+ years with Cribl Stream/Edge in distributed deployments.

Responsibilities

• Lead migration of log sources to Cribl pipelines.
• Design and run resilient pipelines for high ingest volumes.
• Onboard and tune security log sources for SOC/IR support.
• Build and maintain Cribl and Splunk configs: transformations, field normalisation, masking, enrichment.
• Collaborate with SOC, IR and threat teams so security logs reach SIEM reliably.
• Monitor and resolve pipeline and SIEM issues; report on ingest reduction and costs.
• Document log flows, pipeline topology and procedures.

Skills

Splunk SIEM

Cribl Stream

Cribl Edge

Log transport

SPL

Python scripting

Shell/CLI scripting

Monitoring dashboards

Troubleshooting

Tools

Splunk

Cribl Stream

Cribl Edge

Job description

Intec Select Ltd in London is seeking a Data Analytics Engineer to lead the migration and optimisation of log ingestion and observability pipelines, focusing on moving sources from Splunk to Cribl Stream/Edge.

You will design resilient pipelines for high ingest volumes, onboard and tune security log sources for SOC/IR, and build Cribl and Splunk configurations to reduce costs while preserving security coverage.