Splunk Developer and Platform Owner — Security Operations for NATO with security clearance

WLG; Henegouwen; Sur place; EUR 75 000 - 95 000; Plein temps

Résumé du poste

WLG in Belgium is seeking a hands-on senior engineer to join a cyber defence monitoring platform, merging development in Splunk with day-to-day operational support. You will own features from dashboards to data models and automation, and act as the technical bridge to contractors.

This role requires ownership, not a queue mentality, and a strong ability to translate operational needs into concrete technical solutions while ensuring platform health and security.

Qualifications

• At least three years hands-on with Splunk — dashboard development, data models, collections, macros, scheduled searches.
• Splunk interface development and visualisation practice.
• Scripting in Python, Bash or similar, and work with REST APIs and databases.
• Solid grasp of vulnerability management, threat intelligence and incident management.
• Ability to balance operational support against hands-on development.
• Communication that works in both directions — technical to operational users, operational to engineers.
• Fluent professional English.
• Desirable: Splunk certification, ML experience, knowledge of MITRE ATT&CK or vulnerability scoring, NATO or high-security env.

Responsabilités

• Design, develop and maintain dashboards, visualisations and interface components in Splunk.
• Build and optimise data models, collections, scheduled searches, macros and related objects.
• Implement enhancements and fixes driven by operational priority and user feedback.
• Help bring new data sources and tools onto the platform.
• Write automation and supporting scripts in Python, Bash or similar.
• Give day-to-day technical and operational support to the operational users.
• Act as the technical bridge between operational needs and the development contractor.
• Gather and prioritise user feedback, and turn it into clear technical requirements.
• Validate and test contractor deliverables before production, and support early life support for new releases.
• Monitor dashboard performance, data quality and platform health, and drive the improvements.
• Contribute to the technical roadmap for the platform.

Connaissances

Splunk dashboards

Data models

Scheduled searches

Macros

Python

Bash

REST APIs

Databases

Vulnerability management

Threat intelligence

Incident management

Communication

English proficiency

Outils

Splunk

Description du poste

This is a hands-on senior engineering post on a cyber defence monitoring platform, and it has two halves that most roles keep apart. One is development, largely in Splunk: dashboards, data models, searches, automation. The other is operational — supporting the operational team that uses it every day and translating what they need into something buildable. You would also be the technical bridge to the development contractor, validating what they deliver before it reaches production. It is a role for someone with ownership rather than a ticket queue.

What You Would Be Doing

• Design, develop and maintain dashboards, visualisations and interface components in Splunk.
• Build and optimise data models, collections, scheduled searches, macros and related objects.
• Implement enhancements and fixes driven by operational priority and user feedback.
• Help bring new data sources and tools onto the platform.
• Write automation and supporting scripts in Python, Bash or similar.
• Give day-to-day technical and operational support to the operational users.
• Act as the technical bridge between operational needs and the development contractor.
• Gather and prioritise user feedback, and turn it into clear technical requirements.
• Validate and test contractor deliverables before production, and support early life support for new releases.
• Monitor dashboard performance, data quality and platform health, and drive the improvements.
• Contribute to the technical roadmap for the platform.

What you would bring

• At least three years hands-on with Splunk — dashboard development, data models, collections, macros, scheduled searches.
• Splunk interface development and visualisation practice.
• Scripting in Python, Bash or similar, and work with REST APIs and databases.
• A solid grasp of vulnerability management, threat intelligence and incident management.
• A proven ability to balance operational support against hands-on development.
• Communication that works in both directions — technical to operational users, operational to engineers.
• Fluent professional English.

Splunk certification, machine learning experience, knowledge of MITRE ATT&CK or vulnerability scoring, and prior work in NATO or another high-security environment are all desirable.