Inside IR35 Splunk Contract Jobs
Updating results…
29 Contract jobs sorted by:
Date Posted
Date Posted
Rate
Updating results…
29 Contract jobs
Data Engineer - Google Cloud - GCP - Airflow - Cloud Composer - Python - Docker...
Posted 1 day ago by Nexere Consulting Limited
ResponsibilitiesBuild and maintain scalable data pipelines for BigQuery using Cloud Composer and Airflow;Provide observa...
- Rate £350 per day
- Category Inside
- Work type Undetermined
- Location London, UK
Stay Updated on Contract Jobs
Never miss another opportunity with our email alerts.
Save your searches to be notified as soon as new jobs are added.
Create a free account to access remote working contract opportunities outside the UK
Sign Up
Remote AWS Enterprise Architect, Solutions Architect Security, Integration, Tele...
Posted 1 week ago by PRIMUS Global Services Inc.
The role of AWS Enterprise Architect, Solutions Architect focuses on integrating various security and telecom solutions...
- Rate Negotiable
- Category Inside
- Work type Remote
- Location Remote or Arkansas
Create a free account to access remote working contract opportunities outside the UK
Sign UpData Engineer - Google Cloud - GCP - Airflow - Cloud Composer - Python - Docker...
Posted 1 week ago by Nexere Consulting Limited
The Data Engineer role focuses on developing and maintaining scalable data pipelines to support AI/ML user experiences a...
- Rate £350 per day
- Category Inside
- Work type Undetermined
- Location London, UK
Data Engineer - Google Cloud - GCP - Airflow - Cloud Composer - Python - Docker...
Posted 1 week ago by Nexere Consulting Limited
The Data Engineer role focuses on developing and maintaining scalable data pipelines to support AI/ML user experiences a...
- Rate £350 per day
- Category Inside
- Work type Undetermined
- Location London
Sort By
Saved Searches
No saved searches yet
Filters
IR35 Status
Working Arrangements
Industry
Sector
Country
Seniority Level
Posted By
Contract Rate
Date Posted
IR35 Status
Working Arrangements
Industry
Sector
Posted By
Country
Seniority Level
Date Posted
Contract Rate
£
—
£
About Our Inside IR35 Splunk Contract Roles
What does a splunk contractor do?
Splunk contractors are engaged to implement, develop, and optimise the Splunk platform for security information management, IT operations monitoring, and log analytics use cases. Splunk's two primary use cases in the UK enterprise market are SIEM and security analytics within security operations centres, and IT operations and infrastructure monitoring within technology operations teams. Contract engagements involve implementing Splunk Enterprise or Splunk Cloud, developing custom searches and dashboards, building Splunk Enterprise Security correlation searches and notable event management, creating Splunk SOAR playbooks for automated response, managing data onboarding and indexer configuration, and optimising Splunk deployments for performance and licensing cost.
Splunk contractors are expected to have deep, hands-on expertise with the Splunk platform and strong proficiency in SPL (Splunk Processing Language), the query language used for all Splunk search, analysis, and dashboard development. For security-focused roles, experience configuring and tuning Splunk Enterprise Security, developing correlation searches that detect meaningful threat patterns while managing false positive volumes, and building risk-based alerting workflows is the primary technical requirement. For IT operations roles, experience building Splunk dashboards and alerts for infrastructure monitoring, application performance management, and operational intelligence is expected. Knowledge of Splunk architecture components including indexers, search heads, forwarders, and the Splunk Deployment Server for managing distributed environments is expected for roles with platform administration responsibility. Splunk certifications, particularly Splunk Core Certified Power User and the ES and SOAR certifications, are well regarded.
What is the market like for splunk contractors?
The Splunk contract market is a specialist and active segment within the cybersecurity and IT operations contractor market. Splunk has very deep penetration in the financial services sector, where it has been the dominant SIEM platform for many large banks and insurers, creating a consistent market for Splunk contractors in security operations and compliance use cases. While Microsoft Sentinel is growing rapidly and taking market share for new SIEM implementations, the large installed base of Splunk across existing enterprise customers will generate contractor demand for management, optimisation, and development work for many years. IT operations and observability use cases provide an additional and growing source of Splunk contract demand beyond the security market. Compensation reflects the specialist SPL expertise and platform depth required.
What does Inside IR35 mean?
IR35 is UK tax legislation that determines whether a contractor is genuinely self-employed or working in a manner that resembles employment. When a contract is classified as inside IR35, income tax and National Insurance are deducted at source, typically via an umbrella company or agency PAYE. Headline day rates on inside IR35 engagements are generally higher than equivalent outside IR35 roles to account for the tax and employment cost structure.
Inside IR35 determinations are made where the working arrangements are considered to resemble employment, based on factors including the level of client control, the absence of a genuine right of substitution, and the presence of mutuality of obligation. Since April 2021, the end client is responsible for making this determination for medium and large private sector organisations. Many employers in financial services, government, and professional services assess the majority of their contractor engagements as inside IR35.
On QualityContracts.co.uk, approximately 49% of roles with a stated IR35 status are classified as inside IR35, making it the most common arrangement across the contract market. The proportion varies by sector and role type. Each listing on this page displays its IR35 status where provided by the hiring organisation.
What splunk roles are usually Inside IR35?
Inside IR35 Splunk work is found in organisations running Splunk as their core SIEM or observability platform. The contractor manages the Splunk environment, builds and tunes searches, maintains data ingestion pipelines, and supports the SOC or operations team. Financial services firms, government departments, and large enterprises with substantial Splunk deployments embed contractors in their security or platform operations teams. The specialist nature of Splunk administration keeps rates strong.
How much do splunk contractors usually earn when working Inside IR35?
Contract rates for splunk roles typically range from £500 to £850 per day, depending on the scope of the role, required expertise, and the delivery expectations of the engagement. Inside IR35 rates are typically 15% to 30% higher than equivalent outside IR35 roles to account for tax and national insurance deducted at source by the fee-payer.
How many Inside IR35 splunk vacancies are there on Quality Contracts?
Over the past twelve months, we have tracked over 100 splunk contract roles across the site. Around one third of the roles currently listed on the site fall Inside IR35. Data reviewed up to June 2026.