Security Analyst/ Splunk Engineer/ Splunk Consultant

2 days left

Sanderson Government & Defence
30 Aug 2017
27 Sep 2017
Contract Type

Security Analyst/ Splunk Engineer/ Splunk Consultant

My client a financial services provider in the City are actively looking for a contract Senior SOC analyst to join their security team. As the SOC analyst you will be monitoring for events across multiple security technologies, including intruder detection systems, malware detection, file integrity systems, SIEM (Splunk), AWS monitoring.

The Role

  • Ensure SOC scheduled tasks, reported events and incidents are progressed to meet business defined SLAs.
  • Create and customise dashboards, reports, correlation of alerts using Splunk.
  • Perform routine administration, engineering and configuration of SOC tools.
  • Conduct quarterly System access entitlement reviews.
  • Managing the resolution of Penetration test vulnerabilities.
  • Working with 3rd party managed service providers for security monitoring.
  • Maintain a proactive view of potential Cyber security threats
  • Maintain process and service documentation.
  • Act as a technical escalation point for junior members of the team.


  • Minimum 5 years of recent experience working in a SOC environment.
  • Security Analysis and Incident Management; ideally using Splunk and JIRA.
  • Detailed technical knowledge of networks and networking protocols in use (including TCP / IP etc. )
  • Security monitoring within AWS.
  • Detailed knowledge of system administration on Windows, Linux and Unix systems (and relevant variants).
  • Good understanding of cryptography and related concepts and principles (e.g., encryption algorithms, hash functions, PKI, key exchange, certification authorities, digital signatures).
  • Good understanding of Information Security industry standards/best practices and relevant regulations (e.g. PCI DSS, SOX, NIST, ISO, CobiT).
  • Liaise and communicate with all areas of the business, IT and Information Security.
  • Working with Penetration testing 3rd parties and management of related vulnerabilities.

To apply for the role please send your CV to . Or for more information call Mary on .