Senior Splunk and DLP Security Engineer

Job Overview
We are seeking an experienced Senior Splunk and DLP Security Engineer to enhance and optimise DLP monitoring, alerting and reporting capabilities across Splunk and the wider DLP toolset.
The successful candidate will have strong hands-on experience developing advanced Splunk searches, correlating multiple DLP data sources, refining detection logic and building actionable dashboards and alerts. You will work independently to improve monitoring effectiveness, reduce false positives and establish sustainable reporting and operational processes.
You will also support junior analysts, share technical knowledge and ensure the team has clear documentation and runbooks to maintain and develop the enhanced capabilities.
Key Responsibilities
Develop and optimise advanced Splunk searches using SPL, including multi-index correlation, drilldowns and alert development.
Analyse DLP-related indexes and integrate multiple DLP data sources to create joined views of user activity, incidents and control outcomes.
Build and enhance Splunk dashboards to support operational monitoring and management reporting.
Review and tune detection logic to reduce false positives and convert high-volume monitoring data into targeted, actionable alerts.
Develop and refine DLP correlation searches and detection use cases to improve monitoring effectiveness.
Create clear documentation covering searches, dashboards, alert logic, correlation use cases and operational processes.
Produce and maintain runbooks to support consistent operations and knowledge retention within the internal team.
Work independently to identify monitoring improvements and deliver practical enhancements across the DLP capability.
Support junior analysts through technical guidance, knowledge sharing and knowledge