Security Engineer

INTEC SELECT LIMITED; City Of London; Hybrid; GBP 111,000 - 120,000; Full time

Job summary

INTEC SELECT LIMITED in London is seeking a hands-on Security Engineer to join the security team on an initial 6 month contract. The role focuses on migrating logs from Fluent Bit/QRadar to a Splunk service while running SIEMs in parallel through cutover.

You will write Python and shell tooling for log collection, onboard and tune log sources, and work with a third party on detection rules, collaborating with SOC, IR and threat detection teams to ensure reliable log flows and effective detection.

Qualifications

• Hands-on security engineering experience across varied projects.
• Strong Linux skills and Python development experience.
• Familiar with security operations.
• Experience with SIEM tools (QRadar or Splunk) is a plus.
• Experience with log forwarders (Fluent Bit) is helpful.

Responsibilities

• Migrate log feeds to Splunk; validate parsing and volumes.
• Write and debug Python and shell tooling for log collection.
• Onboard and tune log sources (firewalls, EDR, cloud, proxies).
• Support detection rules and use-case work with a third party.
• Coordinate with SOC, IR and threat-detection teams on log reliability.
• Document log flows and standard operating procedures.

Skills

Security engineering

Linux

Python

Shell scripting

Tools

QRadar

Splunk

Fluent Bit

Job description

Security Engineer (Contract) GBP600-GBP650 per day, Inside IR35
Location: London

We're recruiting for a hands-on Security Engineer to join a security team on an initial 6 month contract.

The immediate priority is migrating logs from Fluent Bit/QRadar to a Splunk service, running both SIEMs in parallel through cutover. Beyond that, you'll support the wider team on a mix of security engineering projects and work with a third party on detection rules.

This is a broad engineering role, not a SIEM specialist or admin position.

What you'll be doing:

• Migrating log feeds to Splunk using intermediary shipping software, validating parsing, completeness and volumes before and after cutover
• Writing and debugging Python and shell tooling for log collection, forwarding and validation
• Onboarding and tuning log sources (firewalls, EDR, cloud, authentication, proxies)
• Supporting detection rule and use case work alongside a third party
• Working with SOC, IR and threat detection teams on log reliability and detection quality
• Documenting log flows and operational procedures

What we're looking for:

• Strong hands-on security engineering experience across varied projects
• Strong Linux skills and solid programming experience, including Python and debugging code
• Security operations knowledge
• Some SIEM experience (QRadar, Splunk or similar). QRadar isn't essential, though QRadar migration experience is relevant
• Experience with Fluent Bit or similar log forwarders
• Understanding of log transport (syslog, TCP, UDP, API-based collection)
• Comfortable working with third parties and the wider team

Details:

• GBP600 - GBP650 P/D Inside IR35
• Hybrid role - 3 days P/W onsite
• Initial 6-Month contract

Nice to have: architecture or design experience, and Splunk exposure