Senior Splunk SOAR Engineer – 12‑month contract, remote UK

About the role

We are looking for a Senior Splunk SOAR Engineer to join a high‑performing Cyber Security Engineering team on a 12‑month fixed‑term contract. The role is fully remote within the UK and focuses on designing, developing and optimising security orchestration, automation and response (SOAR) capabilities using the Splunk platform.

Key responsibilities

• Design, develop and maintain SOAR automation and response playbooks using Splunk SOAR (Phantom).
• Partner with Incident Response and Threat Management teams to identify automation opportunities.
• Build and enhance security detection and response use cases.
• Develop analytics to validate automation performance and effectiveness.
• Configure and optimise Splunk Enterprise Security and User Behaviour Analytics.
• Produce technical documentation and ensure compliance with change‑management standards.
• Mentor junior SOAR engineers and contribute to continuous‑improvement initiatives.

Required profile

• 5+ years of relevant experience in the UK with full right to work.
• Eligible for SC security clearance.
• Proven experience delivering enterprise‑scale security automation.

Required skills

• Splunk SOAR (formerly Phantom)
• Splunk Enterprise
• Splunk Enterprise Security (ES)
• Splunk User Behaviour Analytics (UBA)
• Python (or Java, Perl, R, C++) scripting
• Knowledge of MITRE ATT&CK and NIST frameworks

What we offer

• Salary up to £110,000 per year (range £80,000‑£110,000).
• Competitive benefits package.
• Fully‑expensed travel and accommodation for occasional business trips (2‑3 days per month).
• Strong likelihood of contract renewal.