Splunk/SOC Tooling Specialist - 6-Month Contract (Inside IR35) - Hybrid, Central London

Futureheads; London; Hybrid; GBP 50,000 - 70,000; Full time

Job summary

A leading tech staffing firm is seeking a Splunk/SOC Tooling Specialist for a 6-month contract in Central London. You will operate and optimise Splunk deployments and manage SOC tooling operations while supporting the SOC team. Strong experience in Splunk is required, alongside 24x7 SOC tooling environment experience. This hybrid role offers a dynamic working environment.

Qualifications

• Strong experience in Splunk (SPL, searches, dashboards).
• Experience supporting a 24x7 SOC tooling environment.

Responsibilities

• Operate and optimise Splunk deployments and ingestion pipelines.
• Manage integration for other SOC tools.
• Provide day-to-day support to SOC analysts.

Skills

Strong Splunk experience

Experience operating SOC tooling

Coaching junior engineers

Tools

Splunk

Darktrace

SOAR

Job description

Overview

Splunk/SOC Tooling Specialist - 6-month contract (Inside IR35) - Hybrid, Central London

Senior Splunk (and broader SOC tooling) SME to own platform health, ingestion and use-case development while managing tooling operations and supporting the SOC team.

Key responsibilities

• Operate and optimise Splunk deployments, ingestion pipelines and dashboards.
• Build, test and tune detection use cases and alert content; reduce false positives.
• Manage integration and operational support for other SOC tools (Darktrace, SOAR, EDR).
• Provide day-to-day support to SOC analysts and run regular knowledge-transfer/mentoring sessions.
• Own platform maintenance windows, capacity planning and incident support for tooling outages.
• Drive platform upgrades, data onboarding and documentation for runbooks and handovers.

Must have

• Strong Splunk experience (SPL, searches, dashboards, data onboarding and optimisation).
• Experience operating SOC tooling in a 24x7 environment and supporting analyst teams.

Nice to have

• Experience with Darktrace, SOAR tooling and cloud log sources; demonstrated ability to coach junior engineers.