Splunk Security Architect - Central Government

Spinwell Global; London; Hybrid; GBP 125,000 - 150,000; Full time

Job summary

An established industry player is seeking a Splunk Security Architect for a pivotal role in enhancing security operations. This position involves configuring Splunk and AWS infrastructure, producing vital architecture diagrams, and leading technical discussions to ensure high-level security standards. The ideal candidate will possess strong SIEM engineering skills and a proven track record in delivering improvements within Cyber Security Operations. Join a forward-thinking organization dedicated to diversity and inclusion, where your expertise will make a significant impact in the public sector.

Qualifications

• Experience in delivering improvements to Splunk SaaS.
• Strong skills in documentation and presentation.

Responsibilities

• Produce architecture diagrams and design documents.
• Configure Splunk and AWS infrastructure for various systems.

Skills

SIEM engineering and architecture skills

Splunk SaaS

AWS infrastructure skills

Strong communication skills

Tools

AWS EC2

AWS S3

Splunk

Job description

Role: Splunk Security Architect REF 88231

Contract Length: 9 months

Location: Hybrid/London

IR35: Inside

Pay Rate to Intermediary: Up to £800 per day

Security Clearance: SC requested

About the Role

Spinwell is recruiting for a Splunk Security Architect for an excellent opportunity within the public sector.

Responsibilities of the Splunk Security Architect

1. Produce architecture diagrams, high-level and low-level design documents.
2. Configure Splunk with use cases in line with CSOC standards.
3. Configure Splunk as part of onboarding CNI and other systems.
4. Configure all infrastructure including AWS – EC2, S3 buckets, SQS queues, etc.
5. Attend technical workshops and represent the project at key meetings such as the ADF and TDAs.
6. Represent the project in all technical discussions related to Splunk, onboarding, SOAR, Attack Analyzer, etc.

Skills and Experience

1. SIEM engineering and architecture skills, specifically in Splunk SaaS.
2. End-to-end experience of the delivery lifecycle for improvements to Splunk SaaS.
3. Experience in defining improvements within Cyber departments, particularly SIEM enhancements within Cyber Security Operations Centre (CSOC), leading to increased SIEM maturity levels.
4. Strong communication, reporting, documentation, and presentation skills.
5. AWS infrastructure skills for configuring EC2 servers, S3 buckets, etc.

Application Process

If you are a Splunk Security Architect, apply now or send your CV to Spinwell!

We welcome all applications regardless of background, in line with our commitment to diversity, equality, and inclusion.

Additional Information

Applying to this or any other vacancy advertised by Spinwell Ltd constitutes consent for Spinwell Ltd to hold your details for 24 months for assessment purposes and to inform you of suitable positions via email, text, or phone. You may request your data be removed at any time by contacting us, in accordance with GDPR.

Our Commitments

Disability Confident: We guarantee to interview all candidates with a disability who meet the essential criteria for the vacancy.

Armed Forces Covenant: We guarantee to interview all veterans or spouses/partners of military personnel who meet the essential criteria.

If you qualify for these schemes, please notify us and quote the role you are applying for. We will contact you to discuss your suitability and arrange a guaranteed interview.

If you require reasonable adjustments during the recruitment process or have accessibility needs, please inform us.