Job Search

We are seeking an experienced Technical Leader to shape and deliver a modern security monitoring capability centred on Splunk and related security technologies. In this role, you will provide technical direction across the design, implementation, and continuous improvement of security information and event management services. You will work closely with cybersecurity, infrastructure, cloud, application, and risk teams to ensure security data is collected effectively, analysed accurately, and translated into meaningful action.

Your responsibilities will include defining technical standards and architecture, leading the development of detection use cases, improving alert quality, and establishing effective processes for threat monitoring, incident investigation, and response. You will oversee the onboarding and management of data sources, including cloud platforms, endpoints, networks, applications, and identity services. You will also guide the creation of dashboards, reports, correlation searches, automation, and operational metrics that support both security teams and senior stakeholders. A key part of the role will be mentoring engineers and analysts, coordinating delivery across technical teams, and promoting consistent engineering and documentation practices.

You will bring substantial experience working with Splunk in a security operations, detection engineering, or cyber defence environment, together with a strong understanding of SIEM architecture, log management, threat detection, and incident response. Experience with Splunk Enterprise Security, SPL, data onboarding, alert tuning, and security automation is highly desirable. Knowledge of cloud security, identity and access management, network security, vulnerability management, and relevant security frameworks will be valuable. You should be comfortable leading technical discussions, influencing stakeholders, managing competing priorities, and communicating complex issues clearly to both technical and non-technical audiences. Relevant certifications in Splunk, cybersecurity, cloud, or security operations are advantageous.

We are seeking a Technical Leader – Splunk Security to guide the design, delivery and continuous improvement of security monitoring and detection capabilities across a complex technology environment. This role will provide technical direction for Splunk-based security operations, helping teams transform data into actionable intelligence and strengthen the organisation’s ability to identify, investigate and respond to cyber threats. You will work closely with security operations, infrastructure, cloud, application and risk teams to establish effective, scalable and resilient solutions.

Key responsibilities include defining the technical roadmap for Splunk security capabilities; designing and maintaining data onboarding, parsing, indexing and retention strategies; developing and tuning correlation searches, dashboards, alerts and reports; and improving detection coverage against relevant threats and attack techniques. You will lead the development of security use cases, support incident investigations and provide expert guidance on log management, threat hunting and security analytics. The role will also involve reviewing architecture, managing technical standards, identifying opportunities for automation, and ensuring solutions align with security, regulatory and operational requirements. You will mentor engineers and analysts, promote knowledge sharing and contribute to continuous improvement across security monitoring processes.

The successful candidate will have strong hands-on experience with Splunk Enterprise and/or Splunk Enterprise Security, including search development, data models, alerting, dashboards and administration. You should have a solid understanding of security operations, SIEM technologies, incident response, threat detection and common attack frameworks such as MITRE ATT&CK. Experience with cloud platforms, scripting or automation, log source integration and security engineering practices would be highly valuable. Strong communication and stakeholder-management skills are essential, along with the ability to explain complex technical matters clearly, influence decision-making and lead delivery in a collaborative environment. Relevant Splunk certifications or equivalent industry experience are desirable.