Trabajos security cleared en St AlbansCrear alertas

SIEM Engineer (Splunk / Elastic) Hemel Hempstead Hybryd 4 days on site | Up to £65,000 British nationals, security cleared to a high level required (DV eligible role) Want to be more than just another SOC engineer? I'm working with a growing cyber security team looking for a hands-on Splunk SIEM Engineer to help build, optimise and enhance security monitoring capabilities across complex and secure environments. This is a role for someone who enjoys getting under the hood of Splunk – designing detections, improving data quality, onboarding log sources, reducing alert noise and helping security teams get real value from their SIEM platform. You'll be working with Splunk Enterprise, Splunk ES and Elastic Security, helping to improve detection capability, automate processes and strengthen security operations. What we're looking for: Strong Splunk Enterprise / Splunk ES experience Detection engineering and SIEM content development Experience with log ingestion, parsing and data pipelines Strong SPL skills MITRE ATT&CK knowledge Experience tuning alerts and reducing false positives Automation, scripting or Infrastructure as Code experience This is a permanent role based in Hemel Hempstead, with 4 days per week onsite. There is also an out-of-hours call-out rota as part of the wider team. If you're a Splunk-focused SIEM professional who enjoys building better detections rather than simpl...

L2 SOC Analyst (Perm) - SC/DV Clearable.SC Cleared (Must be eligible for DV).Must be a sole British National.Sanderson G&D are seeking multiple SOC Analysts to join a fast-growing Security Operations Centre, where you'll help defend multiple organisations across a wide range of industries - from cri

We are looking for an experienced Splunk Engineer to lead the design, deployment and optimisation of enterprise-scale security monitoring platforms. This is a hands-on technical role, suited to someone with strong Splunk Enterprise and Splunk Enterprise Security experience, who can take ownership of platform engineering, data ingestion, detection content and performance tuning across complex client environments. This is a key technical leadership role, responsible for ensuring the right tooling, controls and processes are in place to help protect and monitor our clients environments. The opportunity is ideally suited to someone with deep hands-on experience deploying, managing and optimising Splunk Enterprise and Splunk ES in large, complex environments. In return, the role offers the chance to broaden your capability and gain deeper experience in Elastic Security, with support and training available to help build your expertise further. You will work closely with cross-functional teams to assess risk, design effective security controls and define testing requirements. You will champion security by design, promote engineering excellence and act as a trusted advisor to clients, helping them understand their security challenges and implement practical, effective solutions to strengthen their security posture. This is an excellent opportunity to deepen your hands-on cybersecurity expertise while making a meaningful impact across both client and organisational security. You do need to hold active DV Clearance. Office based in Hemel Hempstead. What you will be doing: Lead the deployment, management and optimisation of Splunk Enterprise and Splunk ES platforms in large, complex environments. Design, implement and maintain data pipelines, including log ingestion, enrichment and schema standardisation. Develop and tune security detection content, translating threat intelligence and TTPs aligned to MITRE ATT&CK into actionable, high-value alerts. Manage the full detection content lifecycle: design, test, deploy, monitor, tune and retire, using version control and rollback processes. Automate workflows and platform configurations using CI/CD, SOAR, scripting and Infrastructure as Code tools such as Terraform and Ansible. Ensure platform performance, stability and resilience through capacity planning, high availability, disaster recovery and proactive monitoring. Provide technical leadership and guidance to internal teams and clients on security monitoring strategy and best practice. What you will bring: Proven experience deploying and managing Splunk at enterprise scale. Strong hands-on knowledge of SIEM engineering, including indexing, parsing, onboarding and performance tuning. Experience designing and optimising detection content, including MITRE ATT&CK-aligned use cases and alert tuning to reduce noise. Good understanding of data pipeline engineering, log enrichment, data quality and large-scale ingestion architectures. Strong knowledge of SPL; experience with KQL and EQL would be beneficial, but is not essential. Experience with automation and Infrastructure-as-Code within security monitoring or SIEM environments. Solid understanding of SIEM platform operations, including clustering, scaling, high availability, disaster recovery and performance optimisation. Strong problem-solving skills and a proactive approach to improving security operations. An interest in developing expertise in Elastic Security, with support and training available as part of the role. If you are interested in this role but not sure if your skills and experience are exactly what were looking for, please do apply, wed love to hear from you! Employment Type: Full Time, Permanent Location: Hemel Hempstead Security Clearance Level: DV Cleared Internal Recruiter: Jane Salary: Competitive, depending on experience Benefits: £5400 Car Allowance, 25 days annual leave with the option to buy additional days, private health care, life assurance, pension, and generous flexible benefits fund ? Loved reading about this job and want to know more about us? Sopra Sterias Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the clients goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UKs most complex safety- and security-critical markets. TPBN1_UKTJ