Splunk/Elasticsearch Engineer - Cyber Data Platform

Splunk/Elasticsearch Engineer - Cyber Data PlatformLocation: Glasgow - three days per week onsite Contract: 12 monthsSplunk or Elasticsearch experience is essentialWho We Are Robert Walters is the world''s most trusted talent solutions business. Across the globe, we deliver recruitment, outsourcing, and talent advisory services for businesses of all sizes, opening doors for people with diverse skills, ambitions, and backgrounds. The Role Our client is a large multinational firm that provides a range of financial services, including advisory, investment, and asset management solutions. It serves a diverse set of clients worldwide, focusing on strategic planning, market operations, and long-term financial growth.Responsibilities include:Operating and troubleshooting Splunk or Elasticsearch platforms.Onboarding new security data sourcesCreating parsing rules, field extractions, and ingest pipelines.Building Splunk dashboards and supporting security analytics.Installing and configuring platform components.Supporting the migration from Splunk to Elasticsearch.Automating platform configuration using Ansible and Python.Diagnosing Linux, data-pipeline and platform performance issues.Essential experienceAt least three years'' relevant engineering experience.Demonstrable hands-on experience with Splunk, Elasticsearch or the Elastic Stack.Experience onboarding, parsing or managing data sources.Strong troubleshooting and production-support skills.An operational engineering ..... full job details .....