Senior Splunk and DLP Security Engineer

Working Model: Hybrid — 3 days per week at the client office

Role Purpose

Key Responsibilities

• Develop and maintain advanced Splunk searches using SPL, including multi-index correlation, drilldowns, dashboards, and alert development.
• Work with DLP-related indexes and multiple DLP data sources to create joined views of user activity, incidents, and control outcomes.
• Design and refine correlation searches and detection use cases to improve DLP monitoring coverage.
• Tune detection logic, reduce false positives, and improve the accuracy and actionability of security alerts.
• Develop and enhance DLP dashboards for operational monitoring and management reporting.
• Convert high-volume monitoring data into meaningful insights, targeted alerts, and actionable reporting.
• Document searches, correlation logic, reporting processes, and operational procedures.
• Create clear runbooks to support the internal team and ensure sustainable ongoing operations.
• Work independently while collaborating with junior analysts and transferring knowledge as the capability develops.

Essential Skills and Experience

• Advanced SPL skills, including multi-index correlation, drilldowns, dashboards, and alert development.
• Practical experience working with DLP-related indexes and DLP monitoring data.
• Experience correlating multiple DLP data sources to analyse user activity, incidents, and control outcomes.
• Proven ability to tune detection logic, reduce false positives, and develop actionable alerts.
• Experience building operational dashboards and management reports.
• Strong documentation skills, including searches, processes, and operational runbooks.
• Ability to work independently, collaborate with junior analysts, and transfer technical knowledge.

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →