Splunk Systems Engineer (SC Cleared) – Onsite Newport

Sanderson Government & Defence; Newport; On-site; GBP 60,000 - 80,000; Full time

Job summary

Sanderson Government & Defence in the United Kingdom is seeking an experienced System Specialist (Splunk) to join a high-performing SOC. This hands-on role supports SIEM operations, upgrades, migrations and service improvements in a critical programme.

You will provide end-to-end Splunk admin, ensure health and security, deploy add-ons, and contribute to automation. Active SC clearance required, onsite Newport (5 days) under a 3-month initial contract with rolling extensions.

Qualifications

• Hands-on Splunk Enterprise administration experience.
• Experience delivering end-to-end SIEM support in enterprise/security environments.
• Strong knowledge of Splunk upgrades, health checks, monitoring and troubleshooting.
• Proficient in Unix/Linux administration and shell scripting.

Responsibilities

• Provide end-to-end administration and support of the Splunk SIEM platform.
• Conduct Splunk health checks and performance monitoring across the environment.
• Support planned migrations, upgrades and platform enhancement activities.
• Create, maintain and optimise Splunk alerts, dashboards and reports.
• Produce and maintain technical documentation and operational procedures.
• Deploy and manage Splunk Technology Add-ons (TAs).
• Troubleshoot platform issues and implement corrective actions.
• Work closely with SOC analysts, engineers and wider security teams.
• Manage and modify configuration files, deploying changes through Git/GitLab repositories.
• Support automation initiatives through scripting and process improvement.

Skills

Splunk Enterprise

End-to-end SIEM support

Unix/Linux administration

Unix shell scripting

Git/GitLab version control

Splunk dashboards/alerts

Documentation/Procedures

Tools

GitLab

Git

Job description

Sanderson Government & Defence in the United Kingdom is seeking an experienced System Specialist (Splunk) to join a high-performing SOC. This hands-on role supports SIEM operations, upgrades, migrations and service improvements in a critical programme.

You will provide end-to-end Splunk admin, ensure health and security, deploy add-ons, and contribute to automation. Active SC clearance required, onsite Newport (5 days) under a 3-month initial contract with rolling extensions.