Senior Splunk SOAR Engineer – 12‑Month Fixed‑Term, Remote

About the role

We are seeking a senior Splunk SOAR Engineer to join a high‑performing cyber security engineering team on a 12‑month fixed‑term contract. The role is fully remote within the UK and focuses on designing, developing and optimising security orchestration, automation and response (SOAR) capabilities using the Splunk platform.

Key responsibilities

• Design, develop and maintain SOAR automation playbooks using Splunk SOAR (Phantom).
• Collaborate with Incident Response and Threat Management teams to identify automation opportunities.
• Build and enhance security detection and response use cases across Splunk Enterprise Security and User Behaviour Analytics.
• Create analytics to validate automation performance and effectiveness.
• Produce technical documentation and ensure compliance with change‑management standards.
• Mentor junior SOAR engineers and contribute to continuous improvement initiatives.

Required profile

• 5+ years of experience in cyber security engineering or security automation.
• Eligibility for SC clearance and full right to work in the UK.
• Proven experience delivering enterprise‑scale security automation on the Splunk ecosystem.

Required skills

• Splunk SOAR (formerly Phantom)
• Splunk Enterprise and Splunk Enterprise Security (ES)
• Splunk User Behaviour Analytics (UBA)
• Python (or Java, Perl, R, C++) scripting
• Knowledge of MITRE ATT&CK and NIST frameworks

What we offer

• Salary up to £110,000 per year.
• Competitive benefits package.
• Fully expensed travel and accommodation for occasional business trips (2‑3 days per month).
• Strong likelihood of contract renewal.