> Markdown version of [/jobs/ext/4052445-splunk-engineer](https://www.wearedevelopers.com/jobs/ext/4052445-splunk-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Splunk Engineer

- **Company:** Spektrum
- **Location:** Bergen, Belgium
- **Contract:** Contract
- **Skills:** Amazon Web Services, Data Analysis, Microsoft Azure, Bash Shell, Cyber Security, Data Security, Linux, Information Security Management, Python (Programming Language), Network Architecture, Parsing, Windows PowerShell, Regular Expressions, Ansible, Service Design, Security Information and Event Management, Software Engineering, Scripting, Cloud Platform System, Git, Information Technology, Api Design, Splunk
- **Published:** October 13, 2026
- **Apply:** https://www.indeed.com/viewjob?jk=6d35039467784b49

## About the Role

* Bachelor's degree from a nationally recognised university in a related discipline plus 2 years' relevant experience (or 5+ years of extensive, progressive experience in lieu of a degree)
 * At least 1 year of extensive practical experience as a SIEM administrator with Splunk in a large enterprise environment (deployment, installation, configuration and maintenance)
 * Hands-on experience designing and maintaining distributed Splunk architectures
 * At least 2 years of expert-level experience in SIEM and log collection management
 * Demonstrable experience analysing and interpreting system, security and application logs to diagnose faults and spot abnormal behaviour
 * Hands-on systems and tools administration experience, especially in Linux, with solid troubleshooting skills
 * Comprehensive knowledge of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications
 * Practical scripting skills (Bash, Python or Ansible) to automate repetitive tasks
 * Solid understanding of regular expressions
 * Ability to write clear, concise technical documentation and procedures
 * Strong written and verbal communication, able to explain complex issues to varied audiences
 * English professional level, * Bachelor's degree in Cyber Security, IT, Computer Science or a related discipline
 * Experience in a regulated, high-control environment (defence, government, financial services)
 * Extensive administration experience with Splunk Enterprise Security, SOAR and UBA
 * Experience developing Splunk applications and managing Splunk content (Enterprise Security, Advanced Search and Reporting)
 * Experience creating or modifying custom parsers
 * Git and Ansible experience
 * Scripting or software engineering (Python, shell, PowerShell) and API-based system automation
 * Solid grasp of information security practices and the CIA triad
 * ITIL Service Management certification
 * Hands-on experience with network infrastructure and virtualised environments
 * Log collection experience in cloud environments (Azure or AWS)
 * Background in CERTs or security offices, or supporting a military or governmental organisation
 * Industry-leading security certification (CISSP, CISM, CISA, GSNA, SANS GIAC)

## Description

* You will act as one of the main engineers and subject matter experts for SIEM and log collection services, managing and developing the data security systems that underpin cyber monitoring. The role calls for hands-on Splunk expertise in a large, regulated environment, and the ability to support stakeholders, operations and service delivery management throughout the service lifecycle., * Act as SME for SIEM and log collection services, advising stakeholders and providing technical assistance and contributions to data security projects
 * Manage and develop the data security systems, ensuring they are installed, configured and operating correctly
 * Monitor all system components continuously and take technical and non-technical action to resolve issues
 * Keep systems operating within KPIs defined in SLAs with NCSC customers
 * Support Operations and Service Delivery management following ITIL standards (Service Design, Transition, Operations, Change Management, Continual Service Improvement)
 * Support integration with external tools and related activities
 * Proactively identify and propose improvements for an up-to-date, stable environment
 * Prepare business justification, documentation and implementation plans for the Change Management Board, and implement approved changes in coordination with stakeholders
 * Coordinate with service delivery managers, end users and stakeholders, and communicate with other NATO entities and industry partners where required
 * Develop and maintain guidelines, SOPs, system and service design documents and other supporting documentation
 * Produce technical and executive-level reports, and deliver briefings up to NATO executive level
 * Provide occasional on-call support to maintain the availability of SIEM monitoring infrastructure, and support 24/7 incident response during enterprise-level cyber incidents when required