Splunk Security Architect

ZipRecruiter; Swindon; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading recruitment agency is supporting their Central Government client in hiring a Splunk Security Architect for a hybrid role based in London. The position entails producing architectural design documents, configuring Splunk services in alignment with CSOC standards, and enhancing the delivery of SIEM solutions. Ideal candidates will possess SIEM engineering skills and an active SC Clearance, with experience in AWS infrastructure.

Qualifications

• Active SC Clearance or willingness to undergo checks.
• Experience in Splunk SaaS delivery lifecycle.
• Skills in configuring AWS infrastructure.

Responsibilities

• Produce architecture diagrams and design documents.
• Configure Splunk with use cases in line with CSOC standards.
• Attend technical workshops and represent the project in meetings.

Skills

SIEM engineering

Architecture skills

AWS infrastructure

Communication skills

Job description

Job Description

Summer-Browning Associates are currently supporting our Central Government client, who are seeking a Splunk Security Architect on an initial 9-month contract.

Service Location: London (Hybrid)

As a Splunk Security Architect, your main responsibilities will include:

1. Producing architecture diagrams, high-level and low-level design documents.
2. Configuring Splunk with use cases in line with CSOC standards.
3. Configuring Splunk as part of onboarding CNI and all other systems.
4. Configuring all infrastructure including AWS - EC2, S3 buckets, SQS queues, etc.
5. Attending technical workshops and representing the project at key meetings such as the ADF, TDAs, etc.
6. Representing the project across all technical discussions related to Splunk, Onboarding, SOAR, Attack Analyzer, etc.

Essential requirements:

• An active SC Clearance or willingness and eligibility to undergo checks.
• SIEM engineering and architecture skills, specifically in Splunk SaaS.
• Full end-to-end experience of the delivery lifecycle for improvements to Splunk SaaS.
• Experience in defining improvements within Cyber departments, particularly SIEM improvements within Cyber Security Operations Centre (CSOC) functions, leading to increased SIEM Maturity Levels.
• Good communication, reporting, documentation, and presentation skills.
• AWS infrastructure skills for configuring EC2 servers, S3 buckets, etc.

Desirable skills:

• Public Sector experience.
• Experience with wider SIEM solutions and multiple cybersecurity technologies.

To apply, please submit your latest CV for consideration.