Hybrid Splunk SIEM Engineer – Cloud & SOAR

HelloKindred; England; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Hybrid work model

BPSS clearance eligibility

Job summary

HelloKindred is seeking a Splunk SIEM Engineer to design, develop, and enhance security solutions that support enterprise cyber defense. You will administer Splunk Enterprise and Splunk Enterprise Security, build SIEM use cases and detection rules, and maintain data models for advanced analytics, with Splunk Cloud support and integration with Cribl Stream.

The role requires BPSS clearance eligibility, a Bachelor's degree or equivalent, and hands-on experience across SIEM tooling, incident

Qualifications

• Bachelor's degree or equivalent professional experience.
• Proven Splunk Enterprise administration and development experience.
• Strong expertise with Splunk Enterprise Security (SIEM) and correlation search development.
• Experience designing and managing Splunk data models.
• Hands-on experience with Splunk Cloud.
• Experience administering Microsoft Sentinel.

Responsibilities

• Design, develop, and improve SIEM solutions that support enterprise security operations.
• Administer, manage, and maintain Splunk Enterprise and Splunk Enterprise Security environments.
• Develop SIEM use cases, correlation searches, and detection rules.
• Build and maintain Splunk data models to support advanced analytics and security monitoring.
• Configure and support Splunk Cloud environments.
• Administer and maintain Microsoft Sentinel security monitoring capabilities.
• Manage log ingestion, routing, parsing, normalization, and transformation using Splunk Enterprise and Cribl Stream.
• Develop automation workflows and security playbooks using SOAR technologies.
• Analyze security events and support threat detection and incident response activities.
• Troubleshoot security monitoring, network, and infrastructure issues.
• Create technical documentation, operational procedures, and runbooks.
• Develop automation scripts and integrations using Python, PowerShell, SPL, KQL, and SQL.
• Support CI/CD pipelines using GitLab and Jenkins.
• Collaborate with security, infrastructure, and engineering teams to improve monitoring capabilities.
• Support cloud security monitoring across AWS and Azure environments.
• Ensure security monitoring solutions align with governance, compliance, and regulatory requirements.

Skills

Splunk ES

Splunk Admin

Microsoft Sentinel

SOAR

Python

PowerShell

SPL

KQL

SQL

CI/CD

Threat detection

Education

Bachelor's degree

Tools

Cribl Stream

GitLab

Jenkins

AWS

Azure

Job description

HelloKindred is seeking a Splunk SIEM Engineer to design, develop, and enhance security solutions that support enterprise cyber defense. You will administer Splunk Enterprise and Splunk Enterprise Security, build SIEM use cases and detection rules, and maintain data models for advanced analytics, with Splunk Cloud support and integration with Cribl Stream.

The role requires BPSS clearance eligibility, a Bachelor's degree or equivalent, and hands-on experience across SIEM tooling, incident