Splunk Security Architect - Central Government

Summary: The Splunk Security Architect role involves working on a hybrid basis, primarily focused on enhancing SIEM capabilities within Central Government. The position requires expertise in Splunk configuration, architecture documentation, and infrastructure management, particularly in AWS. Candidates must have a strong background in Cyber Security Operations Centre functions and experience in delivering improvements to Splunk SaaS. This role is classified as inside IR35, necessitating work through an umbrella company.

Key Responsibilities:

• Produce architecture diagrams and high-level/low-level design documents.
• Configure Splunk with use cases in line with CSOC standards.
• Onboard Critical National Infrastructure (CNI) and other systems into Splunk.
• Manage configuration of AWS infrastructure including EC2, S3 buckets, and SQS queues.
• Implement SIEM Engineering and Architecture skills specifically in Splunk SaaS.
• Deliver end-to-end improvements to Splunk SaaS.
• Define and implement improvements within Cyber departments, focusing on SIEM maturity levels.

Key Skills:

• Experience in Central Government.
• Proficiency in producing architecture diagrams and design documents.
• Strong configuration skills in Splunk and AWS.
• SIEM Engineering and Architecture expertise, particularly in Splunk SaaS.
• Full delivery lifecycle experience for Splunk improvements.
• Knowledge of Cyber Security Operations Centre functions.
• Ability to define improvements in SIEM maturity levels.

Salary (Rate): £800

City: London

Country: United Kingdom

Working Arrangements: hybrid

IR35 Status: inside IR35

Seniority Level: Mid-Level

Industry: IT