Splunk Security Architect - SC

ZipRecruiter; London; Hybrid; GBP 160,000 - 250,000; Full time

Job summary

A leading company is seeking a Splunk Security Architect for a 9-month hybrid position. The successful candidate will be responsible for configuring Splunk and AWS services, producing architecture documentation, and representing the project in technical discussions. Essential and desirable skills include experience in SIEM and knowledge of various cybersecurity technologies.

Qualifications

• Essential skills in Splunk SaaS engineering and architecture.
• Strong documentation and presentation skills required.
• Desirable qualifications include CISSP and ethical hacking experience.

Responsibilities

• Produce architecture diagrams and design documents.
• Configure Splunk and AWS infrastructure.
• Attend technical workshops and represent the project.

Skills

SIEM engineering and architecture skills

Strong communication skills

AWS infrastructure skills

Education

Cloud Security Architecture (CSA)

Splunk Cloud Administrator

CISSP

Tools

JIRA

Confluence

Git

Job description

Job Description

Role: Splunk Security Architect - SC

Location: London/Hybrid (2-3 days/week on site)

IR35: Inside

Rate: £800/day (Umbrella) MAX

Duration: 9 months

Security Clearance: SC

Responsibilities:

• Produce architecture diagrams, high-level and low-level design documents.
• Configure Splunk with use cases aligned with CSOC standards.
• Configure Splunk during onboarding of CNI and other systems.
• Configure infrastructure, including AWS services like EC2, S3, SQS.
• Attend technical workshops and represent the project at key meetings such as ADF and TDAs.
• Represent the project in all technical discussions related to Splunk, onboarding, SOAR, Attack Analyzer, etc.

Essential Skills:

• SIEM engineering and architecture skills, specifically in Splunk SaaS.
• Experience with delivery lifecycle improvements for Splunk SaaS.
• Experience in defining SIEM improvements within Cyber Security Operations Centre (CSOC) functions.
• Strong communication, reporting, documentation, and presentation skills.
• AWS infrastructure skills, including configuration of EC2, S3, etc.

Desirable Skills:

• Public Sector experience.
• Experience with other SIEM solutions.
• Experience with multiple cybersecurity technologies.

Essential Qualifications:

• Cloud Security Architecture (CSA)
• Splunk Cloud Administrator
• Splunk Enterprise Security
• Splunk SOAR Administrator
• Splunk Certified Cybersecurity Defence Analyst
• Implementing Microsoft Azure Infrastructure Solutions
• Developing Windows Azure and Web Services
• Security Information & Event Management (SIEM)
• JIRA, Confluence, Git

Desirable Qualifications:

• CISSP
• Ethical Hacking and Intrusion Prevention
• Information Security Management Systems (ISMS)
• Access and Management (IDAM)
• Public Key Infrastructure (PKI)

We support Armed Forces Covenant and guarantee interviews for veterans or military spouses/partners meeting all essential criteria. If interested, please notify us, and we will arrange a guaranteed interview. We are committed to accessible recruitment and reasonable adjustments as needed.