About this role
Salary: £40,000 - 70,000 per year
Requirements: We require a strong background in intrusion analysis and the ability to identify and interpret web application logs from a security perspective.We require strong Splunk skills, including experience creating macros, alerts, and dashboards to analyze logs and security events.We require knowledge of current exploits and the ability to identify common exploits in web and event logs.We require working knowledge of Linux, Windows, and macOS operating systems.We require comfort with scripting languages and regular expressions, and strong knowledge of common network protocols.We require working knowledge of enterprise client/server architecture.We value web application experience, the ability to understand logs, Python automation skills, and monitoring and response experience.We value the ability to interpret Apache, IIS, Active Directory, and other security logs; understand modern website deployments and technologies; and recognize web application attacks such as SQL injection, cross-site scripting, and remote file inclusion.We value an understanding of stateful firewalls and firewall rules, as well as experience using tools and advanced analytics to detect anomalous or malicious network transmissions and events.We expect solid technical skills, the ability to work independently and support others on the security team, a strong investigative mindset, quick learning, and a collaborative approach. Responsibilities: We expect you to contribute as a member of our enterprise network application-layer intrusion detection, prevention, and response team.You will develop and implement custom alerts and monitoring controls to detect and mitigate threats.You will assess new threat vectors and design and implement effective security controls.You will investigate security events using data correlation and log analysis tools.You will partner with senior leaders across lines of business to triage security events and report on security initiatives and their impact.You will develop and implement processes and controls that support audit and risk requirements.You will use new intelligence to update existing controls and detect emerging threats against bank assets.You will handle active security events and current threats. Technologies: Active DirectoryFirewallSupportLinuxmacOSNetworkPythonSQLSecuritySplunkWebWindows More:
We are recruiting for an IT Security Engineer on a hybrid contract in Chester, UK, working with a front-line security team focused on active events and threats. On-call and after-hours work may be required; the on-call rotation is approximately one week every two months. TEKsystems is part of the Allegis Group network of companies.
last updated 41 week of 2026