Senior Splunk and DLP Security Engineer

Working Model: Hybrid — 3 days per week at the client office

Role Purpose

Key Responsibilities

• Develop and maintain advanced Splunk searches using SPL, including multi-index correlation, drilldowns, dashboards, and alert development.




• Work with DLP-related indexes and multiple DLP data sources to create joined views of user activity, incidents, and control outcomes.




• Design and refine correlation searches and detection use cases to improve DLP monitoring coverage.




• Tune detection logic, reduce false positives, and improve the accuracy and actionability of security alerts.




• Develop and enhance DLP dashboards for operational monitoring and management reporting.




• Convert high-volume monitoring data into meaningful insights, targeted alerts, and actionable reporting.




• Document searches, correlation logic, reporting processes, and operational procedures.




• Create clear runbooks to support the internal team and ensure sustainable ongoing operations.




• Work independently while collaborating with junior analysts and transferring knowledge as the capability develops.

Essential Skills and Experience

• Advanced SPL skills, including multi-index correlation, drilldowns, dashboards, and alert development.




• Practical experience working with DLP-related indexes and DLP monitoring data.




• Experience correlating multiple DLP data sources to analyse user activity, incidents, and control outcomes.




• Proven ability to tune detection logic, reduce false positives, and develop actionable alerts.




• Experience building operational dashboards and management reports.




• Strong documentation skills, including searches, processes, and operational runbooks.




• Ability to work independently, collaborate with junior analysts, and transfer technical knowledge.

#J-18808-Ljbffr