This on-site role in Mons, Belgium supports a NATO security monitoring program and requires security clearance. A multinational defence organisation maintains a large, distributed Splunk-based security monitoring estate and seeks a Security Data Engineer to own it. This is the senior technical voice on log collection and detection tooling within a cyber security data team. What you would be doing: Act as the subject matter expert for the monitoring platform and all data that feeds it, advising other teams, sizing changes, and taking technical leadership on related projects. Design, deploy and maintain distributed architectures to keep the estate installed, configured and performing. Monitor all components, detect abnormal behavior in system, security and application logs, and take the necessary technical and non-technical actions to resolve. Ensure the service meets performance targets agreed with the customers it protects. Integrate external tooling and propose improvements to keep the environment current rather than merely operational. Write the business case and implementation plan for change boards, then deliver the approved change with other teams. Produce documentation, procedures and design notes, plus technical and executive reporting, and occasional briefings to senior audiences. Take on-call shifts to ensure monitoring remains available outside normal hours. What you would bring: Hands-on experience administering Splunk in a large enterprise—deployment, installation, configuration and maintenance—and real experience with distributed designs. Expert-level backgroun

This on-site role in Mons, Belgium supports a NATO security monitoring program and requires security clearance. A multinational defence organisation maintains a large, distributed Splunk-based security monitoring estate and seeks a Security Data Engineer to own it. This is the senior technical voice on log collection and detection tooling within a cyber security data team. What you would be doing: Act as the subject matter expert for the monitoring platform and all data that feeds it, advising other teams, sizing changes, and taking technical leadership on related projects. Design, deploy and maintain distributed architectures to keep the estate installed, configured and performing. Monitor all components, detect abnormal behavior in system, security and application logs, and take the necessary technical and non-technical actions to resolve. Ensure the service meets performance targets agreed with the customers it protects. Integrate external tooling and propose improvements to keep the environment current rather than merely operational. Write the business case and implementation plan for change boards, then deliver the approved change with other teams. Produce documentation, procedures and design notes, plus technical and executive reporting, and occasional briefings to senior audiences. Take on-call shifts to ensure monitoring remains available outside normal hours. What you would bring: Hands-on experience administering Splunk in a large enterprise—deployment, installation, configuration and maintenance—and real experience with distributed designs. Expert-level backgroun