Splunk SIEM Engineer

Experis - ManpowerGroup; Knutsford; Hybrid; GBP 105,000 - 165,000; Full time

Job summary

ManpowerGroup in Knutsford is seeking a Splunk SIEM Engineer on a contract basis through 30/11/2026. The role is hybrid, with 3 days per week onsite and responsibilities spanning design, development and improvement of SIEM capabilities for our customers and colleagues.

The ideal candidate will have a bachelor’s degree and proven multi-platform SIEM expertise including Splunk Enterprise Security and Microsoft Sentinel, plus automation and data pipeline experience.

Qualifications

• Minimum qualification - bachelor's degree.
• Proven Splunk Enterprise Security, Microsoft Sentinel experience.
• Experience with SIEM architecture, data models and correlation rules.
• Experience in large enterprise environments with threat detection and incident response.
• Hands-on data ingestion, routing and parsing in Splunk Enterprise.

Responsibilities

• Design, develop and improve SIEM software and workflows.
• Create runbooks and procedures; translate security concepts for diverse audiences.
• Develop correlation rules and automation for incident management.
• Collaborate with security operations on threat detection and response.

Skills

Splunk SIEM

Threat detection

Incident response

Python

PowerShell

KQL

SPL

SQL

Cloud security

SIEM data models

Education

Bachelor's degree

Tools

Splunk Enterprise Security

Microsoft Sentinel

Cribl

Job description

Role Title: Splunk SIEM Engineer

Duration: contract to run until 30/11/2026

Location: Knutsford. Hybrid, 3 days per week onsite

Rate: up to £587.33 p/d Umbrella inside IR35

Role purpose / summary

Join us as Splunk SIEM Engineer where you must design, develop and improve software, utilizing various engineering methodologies, that provides business, platform, and technology capabilities for our customers and colleagues.

Looking for a successful Splunk SIEM Engineer, where one should have experience with:

• Minimum Qualification - bachelor's degree
• Multi-Platform SIEM Expertise: Proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions.
• Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints).
• Data Pipeline Management: Hands-on experience with log ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise.
• SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management.
• Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with troubleshooting expertise.
• Communication & Documentation: Excellent technical writing and communication skills to create runbooks, procedures, and translate complex security concepts for diverse audiences.

Some other highly valued skills may include:

• Cloud Security & Modern Infrastructure: Proficiency with AWS/Azure cloud security, containerized environments, and SaaS-based security solutions.
• Programming & Scripting: Advanced skills in Python, PowerShell, KQL, SPL, and SQL for automation, custom integrations, and advanced analytics development.
• Security Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja.
• Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms.
• Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management.
• Compliance & Governance: Knowledge of regulatory frameworks (SOX, PCI-DSS, GDPR) and hands‑on incident response/forensics experience.

All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!

If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.