Systems Engineer - Splunk

Sanderson Government and Defence; Newport; On-site; GBP 48,000 - 88,000; Full time

Job summary

Sanderson Government and Defence seeks an experienced System Specialist (Splunk) to join a high-performing SOC team on a 3‑month contract with extensions, based in Newport. The role requires active SC clearance and hands-on Splunk administration across enterprise SIEM environments.

You will perform upgrades, health checks, dashboards, and automation, working with SOC engineers onsite. The position offers a competitive rate inside IR35, with 5 days onsite per week and a start on 1 November.

Qualifications

• Active SC clearance.
• Experience administering and supporting Splunk Enterprise.
• End-to-end SIEM support in enterprise/security environments.
• Solid understanding of Splunk upgrades, health checks, monitoring, and troubleshooting.
• Strong Unix/Linux administration skills.
• Unix maintenance and administrative tasks.
• Proficiency in Unix shell scripting.
• Creating and maintaining Splunk dashboards, alerts, and documentation.
• Regular use of GitLab/Git for version control and configuration management.
• Experience managing application configuration files and deployments.
• Strong analytical and problem-solving skills.
• Desirable: PowerShell scripting and automation.
• Desirable: DevSecOps/SecDevOps practices and tooling.
• Desirable: Large-scale or government security environments experience.
• Desirable: Knowledge of SIEM migration projects.
• Desirable: Infrastructure-as-code principles familiarity.

Responsibilities

• End-to-end administration and support of the Splunk SIEM platform.
• Splunk health checks and performance monitoring across the environment.
• Support planned migrations, upgrades, and platform enhancements.
• Create, maintain, and optimise Splunk alerts, dashboards, and reports.
• Produce and maintain technical documentation and operational procedures.
• Deploy and manage Splunk Technology Add-ons (TAs).
• Troubleshoot platform issues and implement corrective actions.
• Collaborate with SOC analysts, engineers, and wider security teams.
• Manage and modify configuration files, deploying changes via Git/GitLab repositories.
• Support automation initiatives through scripting and process improvement.

Skills

SC Clearance

Splunk administration

SIEM support

Unix/Linux

Shell scripting

Analytical skills

Troubleshooting

Automation

Problem solving

Tools

Git

GitLab

PowerShell

Unix

Linux

Job description

Salary: £48,000 - 88,000 per year

Requirements

• We require active SC Clearance.
• We are looking for an experienced Splunk professional with strong hands‑on experience administering and supporting Splunk Enterprise environments.
• We need experience providing end-to-end SIEM support within enterprise or security-focused environments.
• We require solid understanding of Splunk upgrades, health checks, monitoring, and troubleshooting.
• We need strong Unix/Linux administration skills.
• We require experience performing Unix maintenance and administrative tasks.
• We need proficiency in Unix shell scripting.
• We require experience creating and maintaining Splunk dashboards, alerts, and documentation.
• We need regular use of GitLab/Git for version control and configuration management.
• We require experience managing application configuration files and deployments.
• We need strong analytical and problem‑solving skills.
• Desirable: PowerShell scripting and automation experience.
• Desirable: Exposure to DevSecOps or SecDevOps practices and tooling.
• Desirable: Experience supporting large-scale or government security environments.
• Desirable: Knowledge of SIEM migration projects.
• Desirable: Familiarity with automation and infrastructure‑as‑code principles.

Responsibilities

• We provide end-to-end administration and support of the Splunk SIEM platform.
• We conduct Splunk health checks and performance monitoring across the environment.
• We support planned migrations, upgrades, and platform enhancement activities.
• We create, maintain, and optimise Splunk alerts, dashboards, and reports.
• We produce and maintain technical documentation and operational procedures.
• We deploy and manage Splunk Technology Add‑ons (TAs).
• We troubleshoot platform issues and implement corrective actions.
• We work closely with SOC analysts, engineers, and wider security teams.
• We manage and modify configuration files, deploying changes through Git/GitLab repositories.
• We support automation initiatives through scripting and process improvement.

Technologies

• DevSecOps
• Git
• GitLab
• Support
• Linux
• PowerShell
• Security
• Splunk
• Unix

More

We are seeking an experienced System Specialist (Splunk) to join a high-performing Security Operations Centre (SOC) team supporting a critical programme of work. This is a 3-month initial contract with rolling extensions, likely up to 6 months, based in Newport with 5 days onsite. The role is inside IR35 with a competitive market rate and a start date of 1st November. We offer the chance to work on a high-profile security programme in a collaborative SOC environment with cutting-edge security technologies, contributing to SIEM transformation and operational improvement initiatives. We welcome applications from people of all backgrounds and perspectives and can support reasonable adjustments during the recruitment process.

last updated 38 week of 2026