SOAR & OT Security Engineer for CNI – SC Cleared

Sanderson Government and Defence; Bradley Stoke; On-site; GBP 65,000 - 90,000; Full time

Job summary

Sanderson Government and Defence is seeking a SOAR/SIEM Security Engineer to support a critical national infrastructure (OT) client on an 18-month fixed-term contract. The role focuses on automating detection and response in high-stakes OT/IT environments, delivering live monitoring and rapid incident response.

You will design playbooks, tune Splunk dashboards, and work closely with engineering and safety teams to improve security across converged networks, recognizing the unique OT constraints

Qualifications

• Active SC clearance required.
• Experience in CNI or OT environments.
• Hands-on with SOAR platforms and Splunk.
• Knowledge of OT vs IT security differences.

Responsibilities

• Design, build, and maintain SOAR playbooks to automate detection and response workflows.
• Develop and tune Splunk use cases, dashboards, and correlation searches across IT and OT data sources.
• Support incident detection and response within CNI/OT environments with engineering and safety teams.
• Contribute to the maturity of security monitoring across converged industrial and enterprise networks.
• Work in OT environments with availability, safety, and legacy-system constraints.

Skills

SOAR

Splunk

OT security

CNI/OT environments

Job description

Sanderson Government and Defence is seeking a SOAR/SIEM Security Engineer to support a critical national infrastructure (OT) client on an 18-month fixed-term contract. The role focuses on automating detection and response in high-stakes OT/IT environments, delivering live monitoring and rapid incident response.

You will design playbooks, tune Splunk dashboards, and work closely with engineering and safety teams to improve security across converged networks, recognizing the unique OT constraints