Splunk Specialist

Salary: £48,000 - 88,000 per year

Requirements:

• Strong hands-on experience administering and supporting Splunk Enterprise environments.
• Experience providing end-to-end SIEM support within enterprise or security-focused environments.
• Solid understanding of Splunk upgrades, health checks, monitoring, and troubleshooting.
• Strong Unix/Linux administration skills.
• Experience performing Unix maintenance and administrative tasks.
• Proficiency in Unix shell scripting.
• Experience creating and maintaining Splunk dashboards, alerts, and documentation.
• Regular use of GitLab/Git for version control and configuration management.
• Experience managing application configuration files and deployments.
• Strong analytical and problem-solving skills.
• Active SC Clearance.
• Ability to work onsite in Newport.
• Desirable: PowerShell scripting and automation experience.
• Desirable: Exposure to DevSecOps or SecDevOps practices and tooling.
• Desirable: Experience supporting large-scale or government security environments.
• Desirable: Knowledge of SIEM migration projects.
• Desirable: Familiarity with automation and infrastructure-as-code principles.

Responsibilities:

• Provide end-to-end administration and support of the Splunk SIEM platform.
• Conduct Splunk health checks and performance monitoring across the environment.
• Support planned migrations, upgrades, and platform enhancement activities.
• Create, maintain, and optimise Splunk alerts, dashboards, and reports.
• Produce and maintain technical documentation and operational procedures.
• Deploy and manage Splunk Technology Add-ons (TAs).
• Troubleshoot platform issues and implement corrective actions.
• Work closely with SOC analysts, engineers, and wider security teams.
• Manage and modify configuration files, deploying changes through Git/GitLab repositories.
• Support automation initiatives through scripting and process improvement.

Technologies:

• DevSecOps
• Git
• GitLab
• Support
• Linux
• PowerShell
• Security
• Splunk
• Unix

More:

We are seeking an experienced System Specialist (Splunk) to join our high-performing Security Operations Centre (SOC) team supporting a critical programme of work. This is a 3-month initial contract with rolling extensions, likely up to 6 months, based in Newport with 5 days onsite. The role starts on 1st November, is inside IR35, and offers a competitive market rate. You will support ongoing SIEM operations, upgrades, migrations, and service improvements while contributing to automation and operational efficiencies. We offer the opportunity to work on a high-profile security programme in a collaborative SOC environment with cutting-edge security technologies, alongside a strong potential for extension and the chance to contribute to SIEM transformation and operational improvement initiatives. We are committed to respect, equality, diversity, and inclusion, and we support reasonable adjustments throughout the recruitment process.

last updated 37 week of 2026