SOC Consultant (Splunk) - 6 months - Fully Remote - Outside IR35

We are seeking an experienced SOC Consultant with a strong specialization in Splunk to join a leading cyber consultancy on a 6-month contract, with the potential for extension. This role is fully remote and offers a competitive rate of £575 per day (Outside IR35).

As a SOC Consultant, you will provide expert-level Splunk knowledge to enhance security operations, support threat detection, and improve incident response capabilities within the Security Operations Centre (SOC).

This position requires active SC Clearance

Key Responsibilities

• Act as a subject matter expert for Splunk within the SOC environment, including deployment, configuration, and optimization.
• Design and implement advanced Splunk dashboards, alerts, and reports to support security monitoring.
• Develop and fine-tune correlation rules, queries, and threat detection use cases.
• Assist in the investigation and remediation of security incidents using Splunk.
• Provide guidance and mentorship to junior SOC team members on Splunk best practices.
• Collaborate with clients to assess and improve SOC processes, tools, and workflows.
• Conduct log analysis and provide recommendations to enhance visibility and threat detection.
• Document processes, procedures, and playbooks for SOC operations.

Must-Have Skills

• Extensive hands-on experience with Splunk, including configuration, troubleshooting, and rule creation.
• Proven track record in Security Operations Center (SOC) environments.
• Strong expertise in incident response and threat detection methodologies.
• Security clearance.

Good-to-Have Skills

• Familiarity with other SIEM tools and integrations.
• Experience in automation and Scripting (Python, PowerShell, or similar).
• Certifications such as Splunk Certified Architect, CISSP, or CISM.

Contract Details

• Duration: 6 months (Potential for Extension)
• Day Rate: £575 per day (Outside IR35)
• Location: Fully Remote
• Start Date: ASAP

SOC Consultant (Splunk) - 6 months - Fully Remote - Outside IR35