24 hours ago
London, United KingdomSenior
Responsibilities
- Manage, route, collate, filter, normalise, and enrich log ingestion pipelines on Cribl Cloud and Cribl Stream.
- Support AWS security telemetry flows including CloudTrail, VPC Flow Logs, GuardDuty findings, EKS audit logs, and IAM activity.
- Parse, mask, filter, deduplicate, and optimise high-volume streaming data before indexing into Splunk.
- Build and maintain Splunk data models, accelerated searches, field extractions, and OCSF-aligned schemas.
- Diagnose ingestion lag, forwarder dropouts, schema mismatches, unparsed JSON, and Cribl pipeline backpressure.
- Manage Kinesis, S3, Amazon Security Lake, storage tiers, encryption, and least-privilege access controls.
- Support the creation, tuning, monitoring, and quality assurance of SIEM and EDR detection rules.
- Work with UK Government Civil Servants and operate within public-sector security assurance requirements.
- Occasionally work outside standard Monday-to-Friday hours during release, change, or maintenance windows.
Requirements
- Proven hands-on experience designing and securing cloud infrastructure in AWS, ideally with Azure and Google Cloud Platform.
- Experience supporting analysts with Splunk SPL detection rules.
- Hands-on experience with Cribl, Kinesis, S3 buckets, and SQS queues.
- Understanding of OCSF schemas and data normalisation.
- Deep understanding of Zero Trust, identity-first security, KMS-based secrets management, and network segmentation.
- Prior experience working with or alongside UK Government Civil Servants.
- Understanding of public-sector security assurance requirements and ability to work in regulated environments.
- Excellent verbal and written communication, engineering discipline, proportionate judgement, client credibility, and delivery ownership.
- Eligibility for UK SC clearance, including the stated UK residency and employment-history requirements.
Benefits
- 30 days of paid annual leave.
- Flexible parental leave.
- Part-time remote working for all staff.
- Paid counselling plus financial and legal advice.
- 7% employer-matched pension.
- Smart Tech scheme, Cycle to Work scheme, flexible benefits allowance, healthcare cash-plan and pension-plan options.
- Optional social and wellbeing events, communities of practice, structured career development, and support for external engagement.
- Standard hours are Monday to Friday, with occasional agreed work outside normal hours for release, change, maintenance, or client operating windows.
Tech Stack
Categories
Data EngineeringSecurity
About Made Tech
Made Tech designs, builds, and operates digital services for the UK public sector, including central government, local authorities, and the NHS. Its consulting-led model covers agile delivery, cloud engineering, DevOps, and bespoke software across technologies like Ruby on Rails, Node.js, and Go. Founded in 2012 and headquartered in London, the company is publicly listed and has delivered services such as Homes for Ukraine and digital access to NHS support.