SC Cleared Splunk SIEM Engineer

Salary: £? - ? per year

Requirements:

• We require active SC Level Clearance and UK residency with the right to work in the UK.
• We require proven experience with Splunk Enterprise Security, Splunk Enterprise administration and development, and SIEM architecture.
• We require experience developing use cases, correlation searches, data models, and administrative functions.
• We require hands-on experience with Microsoft Sentinel and Splunk Cloud.
• We require strong security operations experience, including threat detection, incident response, and security event analysis in large enterprise environments.
• We require hands-on experience with log ingestion, data routing, transformation, normalization, and parsing, including use of Cribl Stream.
• We require experience with SOAR platforms, playbook development, and automated incident response workflows.
• We require working knowledge of network architectures, firewalls, proxies, common attack vectors, and troubleshooting.
• We require excellent technical writing and communication skills.
• We require hands-on experience with CI/CD tools such as GitLab and Jenkins.
• We prefer experience with AWS and Azure security, containerised environments, and SaaS security solutions.
• We prefer advanced skills in Python, PowerShell, KQL, SPL, and SQL.
• We prefer relevant security certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja.
• We prefer experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms.
• We prefer experience with Chef, Ansible, Jenkins, and GitLab CI/CD for infrastructure automation.
• We prefer knowledge of SOX, PCI-DSS, GDPR, and incident response/forensics.

Responsibilities:

• We will design, develop, and improve software and security solutions using engineering methodologies.
• We will administer, manage, and maintain Splunk Enterprise Security as our SIEM platform.
• We will develop and tune correlation searches, data models, and security use cases.
• We will support threat detection, incident response, and security event analysis across enterprise environments.
• We will manage log ingestion, routing, transformation, normalization, and parsing for security data pipelines.
• We will build automation and response workflows using SOAR platforms and playbooks.
• We will troubleshoot security and network-related issues across firewalls, proxies, and related infrastructure.
• We will create runbooks, procedures, and technical documentation for diverse audiences.
• We will work with CI/CD tooling to support automated deployment and configuration management.
• We will collaborate with customers and colleagues to deliver business, platform, and technology capabilities.

Technologies:

• AWS
• Ansible
• Architect
• Azure
• CI/CD
• Cloud
• GitLab
• Support
• Jenkins
• Network
• PowerShell
• Python
• SQL
• Security
• Splunk
• DevOps
• Incident Management

More:

We are a global leader in consulting, technology services, and digital transformation, committed to delivering positive change through technology and human collaboration. This is a hybrid role based in Cheshire, UK, with an expected on-site presence of 3 days per week and 2 days working from home, with potentially more flexibility once established in the contract. Only candidates who are resident in the UK, have the right to work, and hold active SC Level Clearance will be considered; no sponsorship is available.

last updated 31 week of 2026