Splunk Systems Engineer (SC Cleared) – Onsite Newport

Sanderson Government & Defence; Newport; Presencial; GBP 60.000 - 80.000; Jornada completa

Descripción de la vacante

Sanderson Government & Defence in the United Kingdom is seeking an experienced System Specialist (Splunk) to join a high-performing SOC. This hands-on role supports SIEM operations, upgrades, migrations and service improvements in a critical programme.

You will provide end-to-end Splunk admin, ensure health and security, deploy add-ons, and contribute to automation. Active SC clearance required, onsite Newport (5 days) under a 3-month initial contract with rolling extensions.

Formación

• Hands-on Splunk Enterprise administration experience.
• Experience delivering end-to-end SIEM support in enterprise/security environments.
• Strong knowledge of Splunk upgrades, health checks, monitoring and troubleshooting.
• Proficient in Unix/Linux administration and shell scripting.

Responsabilidades

• Provide end-to-end administration and support of the Splunk SIEM platform.
• Conduct Splunk health checks and performance monitoring across the environment.
• Support planned migrations, upgrades and platform enhancement activities.
• Create, maintain and optimise Splunk alerts, dashboards and reports.
• Produce and maintain technical documentation and operational procedures.
• Deploy and manage Splunk Technology Add-ons (TAs).
• Troubleshoot platform issues and implement corrective actions.
• Work closely with SOC analysts, engineers and wider security teams.
• Manage and modify configuration files, deploying changes through Git/GitLab repositories.
• Support automation initiatives through scripting and process improvement.

Conocimientos

Splunk Enterprise

End-to-end SIEM support

Unix/Linux administration

Unix shell scripting

Git/GitLab version control

Splunk dashboards/alerts

Documentation/Procedures

Herramientas

GitLab

Git

Descripción del empleo

Sanderson Government & Defence in the United Kingdom is seeking an experienced System Specialist (Splunk) to join a high-performing SOC. This hands-on role supports SIEM operations, upgrades, migrations and service improvements in a critical programme.

You will provide end-to-end Splunk admin, ensure health and security, deploy add-ons, and contribute to automation. Active SC clearance required, onsite Newport (5 days) under a 3-month initial contract with rolling extensions.