Title –Senior Splunk and DLP Security Engineer
Location: London, UK (Hybrid – 3 days in a week from client office)
Role Purpose
We need someone who can independently improve our DLP monitoring and alerting capability across Splunk and the wider DLP toolset.
- Strong hands-on Splunk engineering experience, including advanced SPL, multi-index correlation, drilldowns, dashboards and alert development.
- Practical experience with DLP related indexes
- Able to take multiple DLP data sources and build joined views of user activity, incidents and control outcomes.
- Experienced in tuning detection logic, reducing false positives and converting high-volume monitoring data into targeted, actionable alerts.
- Able to build operational and management reporting, with clear documentation and runbooks for the internal team.
- Comfortable working independently with junior analysts and transferring knowledge as the capability is developed.
- Expected outcomes would include improved DLP dashboards, refined alerts and correlation use cases, documented searches and processes, and a sustainable reporting approach.
#J-18808-Ljbffr…
