> Markdown version of [/jobs/ext/2812310-siem-engineer-splunk-platform-owner-for-nato-with-security-clearance](https://www.wearedevelopers.com/jobs/ext/2812310-siem-engineer-splunk-platform-owner-for-nato-with-security-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# SIEM Engineer - Splunk Platform Owner for NATO with security clearance

- **Company:** WLG
- **Location:** Bergen, Belgium
- **Contract:** Permanent contract
- **Skills:** Bash Shell, Cyber Security, Distributed Systems, Python (Programming Language), Linux System Administration, Regular Expressions, Ansible, Security Information and Event Management, Systems Integration, Scripting, Git, Splunk
- **Published:** September 10, 2026
- **Apply:** https://www.adzuna.be/details/5877639952

## About the Role

* Hands-on time administering Splunk in a large enterprise - deployment, installation, configuration and maintenance - and real experience of distributed designs.
 * Expert-level background in log collection and security monitoring management, with the analytical habit of reading logs to diagnose rather than to confirm.
 * Strong Linux administration and troubleshooting, and comfort with regular expressions.
 * Scripting to take the repetition out of the work: Bash, Python or Ansible.
 * A solid grounding in computer and communication security, networking, and where modern operating systems and applications tend to be weak.
 * Clear technical writing and the ability to explain a complicated problem to people who do not share your background.
 * Nice to have: Enterprise Security, SOAR and UBA, custom parsers, Git, cloud log collection, and an industry certification such as CISSP, CISM or a GIAC.

## Description

A multinational defence organisation runs its security monitoring on a large, distributed Splunk estate, and is looking for the engineer who will own it. This is the senior technical voice on log collection and detection tooling for a cyber security data team, not a ticket-queue role.

What you would be doing

 * Acting as the subject matter expert for the monitoring platform and everything that feeds it - advising other teams, sizing changes and taking the technical lead on related projects.
 * Designing, deploying and maintaining distributed architectures, and keeping the whole estate installed, configured and behaving.
 * Watching every component, spotting abnormal behaviour early in system, security and application logs, and taking the technical and the non-technical action needed to clear it.
 * Keeping the service inside the performance targets agreed with the customers it protects.
 * Integrating external tooling, and proposing the improvements that keep the environment current instead of merely alive.
 * Writing up the business case and the implementation plan for change boards, then delivering the approved change with the other teams involved.
 * Producing documentation, procedures and design notes, plus technical and executive reporting and the occasional briefing to a senior audience.
 * Taking a turn on call, so that monitoring stays available when something breaks out of hours.


## Related Videos

- [Better Together: Leveraging Your Observability Tools as a SIEM](https://www.wearedevelopers.com/videos/2118-better-together-leveraging-your-observability-tools-as-a-siem)
- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture)
- [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews)

## Related Articles

- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this)
- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)