OT Security Engineer (SOAR/SIEM) – SC Cleared, High-Impact

Sanderson Government & Defence; Cheltenham; On-site; GBP 60,000 - 90,000; Full time

Job summary

Sanderson Government & Defence seeks a SOAR/SIEM Security Engineer to support a critical national infrastructure (OT) client on an 18-month fixed-term contract, focusing on protecting operational technology environments that underpin essential services.

You will design, implement, and tune SOAR playbooks and Splunk detections, working closely with engineering and safety teams to detect, respond, and automate defence against threats in high-stakes live OT/IT environments.

Qualifications

• Active SC clearance.
• Proven experience in CNI/OT environments.
• Hands-on with SOAR platforms and Splunk.
• Understanding OT vs IT security and high-consequence live environments.

Responsibilities

• Design, build, and maintain SOAR playbooks to automate detection and response workflows.
• Develop and tune Splunk use cases, dashboards, and correlation searches across IT and OT data sources.
• Support incident detection and response within CNI/OT environments, collaborating with engineering and safety teams.
• Contribute to the maturity of security monitoring across converged industrial and enterprise networks.
• Operate in OT-specific constraints around availability, safety, and legacy systems.

Job description

Sanderson Government & Defence seeks a SOAR/SIEM Security Engineer to support a critical national infrastructure (OT) client on an 18-month fixed-term contract, focusing on protecting operational technology environments that underpin essential services.

You will design, implement, and tune SOAR playbooks and Splunk detections, working closely with engineering and safety teams to detect, respond, and automate defence against threats in high-stakes live OT/IT environments.