Senior Splunk and DLP Security Engineer

Senior Splunk and DLP Security Engineer Location: London, UK Working Model: Hybrid — 3 days per week at the client office Role Purpose Key Responsibilities

• Develop and maintain advanced Splunk searches using SPL, including multi-index correlation, drilldowns, dashboards, and alert development.
• Work with DLP-related indexes and multiple DLP data sources to create joined views of user activity, incidents, and control outcomes.
• Design and refine correlation searches and detection use cases to improve DLP monitoring coverage.
• Tune detection logic, reduce false positives, and improve the accuracy and actionability of security alerts.
• Develop and enhance DLP dashboards for operational monitoring and management reporting.
• Convert high-volume monitoring data into meaningful insights, targeted alerts, and actionable reporting.
• Document searches, correlation logic, reporting processes, and operational procedures.
• Create clear runbooks to support the internal team and ensure sustainable ongoing operations.
• Work independently while collaborating with junior analysts and transferring knowledge as the capability develops. Essential Skills and Experience
• Strong hands-on Splunk engineering experience.
• Advanced SPL skills, including multi-index correlation, drilldowns, dashboards, and alert development.
• Practical experience working with DLP-related indexes and DLP monitoring data.
• Experience correlating multiple DLP data sources to analyse user activity, incidents, and control outcomes.
• Proven ability to tune detection logic, reduce false positives, and develop actionable alerts.
• Experience building operational dashboards and management reports.
• Strong documentation skills, including searches, processes, and operational runbooks.
• Ability to work independently, collaborate with junior analysts, and transfer technical knowledge.