Data Analytics Engineer

Data Analytics Engineer Splunk and Cribl SIEM PipelinesWe''re hiring a Data Analytics Engineer to lead the migration, optimisation and secure operation of log ingestion and observability pipelines, with a focus on moving log sources from Splunk ingestion to Cribl Stream/Edge.The roleLead the migration of log sources to load-balanced, fault-tolerant Cribl pipelinesDesign and run resilient pipelines for high ingest volumes (Cribl worker groups, external load balancers, syslog distribution)Onboard, parse and tune security log sources (firewalls, EDR, cloud, authentication, proxies), using data reduction to cut Splunk ingest and storage costs without losing security coverageBuild and maintain Cribl and Splunk configs: transformations, field normalisation, masking, enrichmentWork with SOC, IR and threat detection teams so security logs reach the SIEM reliably and are tuned for detectionMonitor and resolve pipeline and SIEM issues, and report on ingest reduction, cost savings, pipeline health and event lossDocument log flows, pipeline topology and operational proceduresWhat you''ll bringStrong hands-on Splunk SIEM engineering (indexers, search heads, clustering, forwarders, CIM, performance optimisation)2+ years with Cribl Stream/Edge, including distributed, load-balanced deploymentsSolid grasp of log transport (syslog, HEC, TCP, UDP) and balancing strategies in HA logging environmentsProven experience onboarding and tuning security log sources for SOC/IR supportAdvanced SPL, data ..... full job details .....