{"id":2442062,"url":"https://alion.io/job/spektrum-group-splunk-engineer-2","title":"Splunk Engineer","company":{"id":183673,"name":"Spektrum Group","domain":"spektrum-group.com","url":"https://alion.io/company/spektrum-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":93,"open_postings":25,"ghost_share":0,"stale_share":0.08,"repost_share":0,"time_to_fill_p50_days":115,"computed_at":"2026-10-13T05:45:00Z"}},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Mons, Belgium","Leeds, United Kingdom"],"countries":["BE","GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":56000,"max_usd":127000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":6708},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"Bash","optional":false},{"name":"ITIL","optional":false},{"name":"Linux","optional":false},{"name":"Python","optional":false},{"name":"SIEM","optional":false},{"name":"Splunk","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"Git","optional":true},{"name":"PowerShell","optional":true}],"status":"live","first_seen_at":"2026-10-13T08:43:01Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-13T23:58:11Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.\nWho we are supporting \nThe NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.\nThe NCIA provides a wide range of services, including:\nCyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.\nCommand and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.\nSatellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.\nElectronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.\nInformation Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.\nOverall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.\nThe program\nAssistance and Advisory Service (AAS)\nThe NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.\nTo provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.\nRole ID - C005335\nRole Background\nYou will act as one of the main engineers and subject matter experts for SIEM and log collection services, managing and developing the data security systems that underpin cyber monitoring. The role calls for hands-on Splunk expertise in a large, regulated environment, and the ability to support stakeholders, operations and service delivery management throughout the service lifecycle.\nRole Duties and Responsibilities\nAct as SME for SIEM and log collection services, advising stakeholders and providing technical assistance and contributions to data security projects\nManage and develop the data security systems, ensuring they are installed, configured and operating correctly\nMonitor all system components continuously and take technical and non-technical action to resolve issues\nKeep systems operating within KPIs defined in SLAs with NCSC customers\nSupport Operations and Service Delivery management following ITIL standards (Service Design, Transition, Operations, Change Management, Continual Service Improvement)\nSupport integration with external tools and related activities\nProactively identify and propose improvements for an up-to-date, stable environment\nPrepare business justification, documentation and implementation plans for the Change Management Board, and implement approved changes in coordination with stakeholders\nCoordinate with service delivery managers, end users and stakeholders, and communicate with other NATO entities and industry partners where required\nDevelop and maintain guidelines, SOPs, system and service design documents and other supporting documentation\nProduce technical and executive-level reports, and deliver briefings up to NATO executive level\nProvide occasional on-call support to maintain the availability of SIEM monitoring infrastructure, and support 24/7 incident response during enterprise-level cyber incidents when required\nEssential Skills, Experience and Certifications\nBachelor’s degree from a nationally recognised university in a related discipline plus 2 years’ relevant experience (or 5+ years of extensive, progressive experience in lieu of a degree)\nAt least 1 year of extensive practical experience as a SIEM administrator with Splunk in a large enterprise environment (deployment, installation, configuration and maintenance)\nHands-on experience designing and maintaining distributed Splunk architectures\nAt least 2 years of expert-level experience in SIEM and log collection management\nDemonstrable experience analysing and interpreting system, security and application logs to diagnose faults and spot abnormal behaviour\nHands-on systems and tools administration experience, especially in Linux, with solid troubleshooting skills\nComprehensive knowledge of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications\nPractical scripting skills (Bash, Python or Ansible) to automate repetitive tasks\nSolid understanding of regular expressions\nAbility to write clear, concise technical documentation and procedures\nStrong written and verbal communication, able to explain complex issues to varied audiences\nEnglish professional level\nDesirable Qualifications\nBachelor’s degree in Cyber Security, IT, Computer Science or a related discipline\nExperience in a regulated, high-control environment (defence, government, financial services)\nExtensive administration experience with Splunk Enterprise Security, SOAR and UBA\nExperience developing Splunk applications and managing Splunk content (Enterprise Security, Advanced Search and Reporting)\nExperience creating or modifying custom parsers\nGit and Ansible experience\nScripting or software engineering (Python, shell, PowerShell) and API-based system automation\nSolid grasp of information security practices and the CIA triad\nITIL Service Management certification\nHands-on experience with network infrastructure and virtualised environments\nLog collection experience in cloud environments (Azure or AWS)\nBackground in CERTs or security offices, or supporting a military or governmental organisation\nIndustry-leading security certification (CISSP, CISM, CISA, GSNA, SANS GIAC)\nWorking Location\nMons, Belgium\nWorking Policy\nFull-time on site. Occasional work out-side office hours may be needed (on-call)\nTravel\nSome travel to other NATO sites may be required\nSecurity Clearance\nValid National or NATO Secret personal security clearance","description_format":"text","description_chars":6939,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Security Operations","Management Consulting"],"lifecycle":[{"event":"open","at":"2026-10-13T12:23:11Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":115,"reasons":["conf:2","win:early"],"computed_at":"2026-10-14T02:26:46Z"},"pay":null,"html_url":"https://alion.io/job/spektrum-group-splunk-engineer-2","json_url":"https://alion.io/job/spektrum-group-splunk-engineer-2.json","meta":{"generated_at":"2026-10-14T02:26:46Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3699,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":183673},"rest":"https://alion.io/mcp/rest/get_company?id=183673"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fspektrum-group-splunk-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fspektrum-group-splunk-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fspektrum-group-splunk-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/spektrum-group-splunk-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fspektrum-group-splunk-engineer-2"}]}