Splunk SIEM Engineer – Linux, SC Cleared

Sanderson Government and Defence; Newport; On-site; GBP 48,000 - 88,000; Full time

Job summary

Sanderson Government and Defence seeks an experienced System Specialist (Splunk) to join a high-performing SOC team on a 3‑month contract with extensions, based in Newport. The role requires active SC clearance and hands-on Splunk administration across enterprise SIEM environments.

You will perform upgrades, health checks, dashboards, and automation, working with SOC engineers onsite. The position offers a competitive rate inside IR35, with 5 days onsite per week and a start on 1 November.

Qualifications

• Active SC clearance.
• Experience administering and supporting Splunk Enterprise.
• End-to-end SIEM support in enterprise/security environments.
• Solid understanding of Splunk upgrades, health checks, monitoring, and troubleshooting.
• Strong Unix/Linux administration skills.
• Unix maintenance and administrative tasks.
• Proficiency in Unix shell scripting.
• Creating and maintaining Splunk dashboards, alerts, and documentation.
• Regular use of GitLab/Git for version control and configuration management.
• Experience managing application configuration files and deployments.
• Strong analytical and problem-solving skills.
• Desirable: PowerShell scripting and automation.
• Desirable: DevSecOps/SecDevOps practices and tooling.
• Desirable: Large-scale or government security environments experience.
• Desirable: Knowledge of SIEM migration projects.
• Desirable: Infrastructure-as-code principles familiarity.

Responsibilities

• End-to-end administration and support of the Splunk SIEM platform.
• Splunk health checks and performance monitoring across the environment.
• Support planned migrations, upgrades, and platform enhancements.
• Create, maintain, and optimise Splunk alerts, dashboards, and reports.
• Produce and maintain technical documentation and operational procedures.
• Deploy and manage Splunk Technology Add-ons (TAs).
• Troubleshoot platform issues and implement corrective actions.
• Collaborate with SOC analysts, engineers, and wider security teams.
• Manage and modify configuration files, deploying changes via Git/GitLab repositories.
• Support automation initiatives through scripting and process improvement.

Skills

SC Clearance

Splunk administration

SIEM support

Unix/Linux

Shell scripting

Analytical skills

Troubleshooting

Automation

Problem solving

Tools

Git

GitLab

PowerShell

Unix

Linux

Job description

Sanderson Government and Defence seeks an experienced System Specialist (Splunk) to join a high-performing SOC team on a 3‑month contract with extensions, based in Newport. The role requires active SC clearance and hands-on Splunk administration across enterprise SIEM environments.

You will perform upgrades, health checks, dashboards, and automation, working with SOC engineers onsite. The position offers a competitive rate inside IR35, with 5 days onsite per week and a start on 1 November.