> Markdown version of [/jobs/ext/4170466-security-engineer](https://www.wearedevelopers.com/jobs/ext/4170466-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer

- **Company:** VIQU Ltd
- **Location:** London, UK (Remote available)
- **Salary:** £143,000.0 - £169,000.0
- **Contract:** Permanent contract
- **Skills:** Bash Shell, Intrusion Detection and Prevention, Python (Programming Language), Parsing, Security Information and Event Management, Data Logging, Scripting, Data Ingestion, Fluentd, QRadar, Splunk
- **Published:** October 14, 2026
- **Apply:** https://find.jobs/jobs-near-me/apply/ats-redirect/?id=3020315644-2

## About the Role

Essential Skills & Experience from the Security Engineer

 * Strong hands-on experience with IBM QRadar SIEM.
 * Experience developing, maintaining and tuning SIEM rules and correlation searches.
 * Good understanding of security logging, log sources and event normalisation.
 * Experience with log aggregation and forwarding technologies.
 * Experience working with SOC teams and supporting security monitoring operations.

Desirable Skills from the Security Engineer

 * Experience with Fluentd, Cribl or Fluent Bit.
 * Exposure to Splunk SIEM and migration projects.
 * Scripting experience using Python, Bash or similar.
 * Experience onboarding new log sources and troubleshooting ingestion pipelines.

## Description

My Client is seeking a hands-on Security Engineer to own and optimise SIEM rules, alert tuning and log aggregation, primarily within IBM QRadar. The role will focus on improving threat detection and ensuring high-quality security logs are available to a third-party SOC. There may also be an opportunity to support a future migration to Splunk., * Own, maintain and tune IBM QRadar SIEM rules, correlation logic and alerts.

 * Review and optimise detection use cases to improve threat visibility and reduce false positives.
 * Configure and maintain log collection, parsing, normalisation and aggregation.
 * Support log aggregation using Fluentd, Cribl or similar technologies.
 * Ensure relevant security logs are accurately ingested and available to the third-party SOC.
 * Troubleshoot log ingestion, parsing and SIEM detection issues.
 * Identify opportunities to improve SIEM coverage, logging quality and detection capabilities.
 * Support planning and potential migration from QRadar to Splunk.