Security Engineer

Intec Select Limited; Greater London; Hybrid; GBP 111,000 - 120,000; Full time

Job summary

Intec Select Limited is recruiting a hands-on Security Engineer for an initial 6-month contract in London. The role focuses on migrating logs from Fluent Bit/QRadar to a Splunk service, with SIEMs running in parallel during cutover.

You will develop Python and shell tooling, onboard and tune log sources, and collaborate with SOC, IR and third parties to improve log reliability and detection quality. Hybrid role with three days onsite.

Qualifications

• Hands-on security engineering across varied projects.
• Strong Linux skills and programming in Python.
• Security operations knowledge.
• SIEM experience with QRadar or Splunk (QRadar migration helpful).
• Experience with log forwarders (Fluent Bit).

Responsibilities

• Migrate log feeds to Splunk; validate parsing, completeness, volumes.
• Write and debug Python and shell tooling for log collection and validation.
• Onboard and tune log sources (firewalls, EDR, cloud, auth, proxies).
• Support detection rules and use cases with a third party.
• Collaborate with SOC, IR, threat detection on log reliability.
• Document log flows and operational procedures.

Skills

Security engineering

Linux

Python

Security operations

SIEM experience

Tools

QRadar

Splunk

Fluent Bit

Job description

Security Engineer (Contract) | £600-£650 per day, Inside IR35

Location: London

We’re recruiting for a hands-on Security Engineer to join a security team on an initial 6 month contract.

The immediate priority is migrating logs from Fluent Bit/QRadar to a Splunk service, running both SIEMs in parallel through cutover. Beyond that, you’ll support the wider team on a mix of security engineering projects and work with a third party on detection rules.

This is a broad engineering role, not a SIEM specialist or admin position.

What you’ll be doing:

• Migrating log feeds to Splunk using intermediary shipping software, validating parsing, completeness and volumes before and after cutover
• Writing and debugging Python and shell tooling for log collection, forwarding and validation
• Onboarding and tuning log sources (firewalls, EDR, cloud, authentication, proxies)
• Supporting detection rule and use case work alongside a third party
• Working with SOC, IR and threat detection teams on log reliability and detection quality
• Documenting log flows and operational procedures

What we’re looking for:

• Strong hands-on security engineering experience across varied projects
• Strong Linux skills and solid programming experience, including Python and debugging code
• Security operations knowledge
• Some SIEM experience (QRadar, Splunk or similar). QRadar isn’t essential, though QRadar migration experience is relevant
• Experience with Fluent Bit or similar log forwarders
• Understanding of log transport (syslog, TCP, UDP, API-based collection)
• Comfortable working with third parties and the wider team

Details:

• Hybrid role - 3 days P/W onsite
• Initial 6-Month contract

Nice to have: architecture or design experience, and Splunk exposure