Job Description

Splunk development where the dashboards are used by a cyber operations centre during real incidents.

You will build and maintain the Cyber Defence Situational Awareness platform at a NATO site in Mons, working directly with the operations centre users who depend on it.

What you will be doing

• Developing and maintaining dashboards, visualisations and UI components in Splunk
• Hands-on work on data models, KVStore collections, scheduled searches and macros
• Implementing small to medium enhancements and fixes driven by operational feedback
• Integrating new data sources and tools into the platform
• Writing scripts and automation to improve data processing and platform operations
• Providing day to day technical and operational support to operations centre users
• Acting as the technical bridge between the users and the development contractor

What you will need

• Real Splunk development experience: data models, searches, dashboards, not just querying
• Scripting and automation for data processing
• Experience integrating data sources into a security monitoring platform
• Comfort supporting operational users directly, at their pace rather than a sprint's

Worth knowing before you apply

• Fully on-site in Mons
• It is half engineering and half operational support. If you want pure development with no user contact, this is not it.

Practical detail

• Contract engagement, about 560 hours from late September to the end of December 2026
• An active security clearance is required for this role

Your CV may not be up to date. That is not a problem, send me whatever you have and I will come back to you either way.