Senior Digital Engineer (Permanent)

We are looking for an experienced Splunk Engineer to lead the design, deployment and optimisation of enterprise-scale security monitoring platforms. This is a hands-on technical role, suited to someone with strong Splunk Enterprise and Splunk Enterprise Security experience, who can take ownership of platform engineering, data ingestion, detection content and performance tuning across complex client environments.

This is a key technical leadership role, responsible for ensuring the right tooling, controls and processes are in place to help protect and monitor our clients' environments. In return, the role offers the chance to broaden your capability and gain deeper experience in Elastic Security, with support and training available to help build your expertise further.

You will work closely with cross-functional teams to assess risk, design effective security controls and define testing requirements. You will champion security by design, promote engineering excellence and act as a trusted advisor to clients, helping them understand their security challenges and implement practical, effective solutions to strengthen their security posture.

This is an excellent opportunity to deepen your hands-on cybersecurity expertise while making a meaningful impact across both client and organisational security. Office based in Hemel Hempstead.

• Lead the deployment, management and optimisation of Splunk Enterprise and Splunk ES platforms in large, complex environments.
• Design, implement and maintain data pipelines, including log ingestion, enrichment and schema standardisation.
• Develop and tune security detection content, translating threat intelligence and TTPs aligned to MITRE ATT&CK into actionable, high-value alerts.
• Manage the full detection content lifecycle: design, test, deploy, monitor, tune and retire, using version control and rollback processes.
• Automate workflows and platform configurations using CI/CD, SOAR, scripting and Infrastructure as Code tools such as Terraform and Ansible.
• Ensure platform performance, stability and resilience through capacity planning, high availability, disaster recovery and proactive monitoring.
• Provide technical leadership and guidance to internal teams and clients on security monitoring strategy and best practice.
• Strong hands-on knowledge of SIEM engineering, including indexing, parsing, onboarding and performance tuning.
• Experience designing and optimising detection content, including MITRE ATT&CK-aligned use cases and alert tuning to reduce noise.
• Good understanding of data pipeline engineering, log enrichment, data quality and large-scale ingestion architectures.
• Experience with automation and Infrastructure-as-Code within security monitoring or SIEM environments.
• Solid understanding of SIEM platform operations, including clustering, scaling, high availability, disaster recovery and performance optimisation.
• An interest in developing expertise in Elastic Security, with support and training available as part of the role.