Senior Splunk and DLP Security Engineer

HCL Technologies Limited; Manchester; Remote; GBP 70,000 - 100,000; Full time

Job summary

HCL Technologies Limited is seeking a Senior Splunk and DLP Security Engineer to advance our DLP monitoring, alerting and reporting across Splunk and related toolsets. The role is remote in the UK with occasional travel; you will build dashboards, tune detections, work with analysts, and produce runbooks to scale security analytics.

The position offers the chance to collaborate with global teams, drive security outcomes, and contribute to a mature DLP program while growing your expertise in

Qualifications

• Strong hands-on Splunk engineering experience, including advanced SPL, multi-index correlation, drilldowns, dashboards and alert development.
• Practical experience with DLP related indexes.
• Able to take multiple DLP data sources and build joined views of user activity, incidents and control outcomes.
• Experienced in tuning detection logic, reducing false positives and converting high-volume monitoring data into targeted, actionable alerts.
• Able to build operational and management reporting, with clear documentation and runbooks for the internal team.
• Comfortable working independently with junior analysts and transferring knowledge as the capability is developed.

Responsibilities

• Strong hands-on Splunk engineering experience, including advanced SPL, multi-index correlation, drilldowns, dashboards and alert development.
• Practical experience with DLP related indexes.
• Able to take multiple DLP data sources and build joined views of user activity, incidents and control outcomes.
• Experienced in tuning detection logic, reducing false positives and converting high-volume monitoring data into targeted, actionable alerts.
• Able to build operational and management reporting, with clear documentation and runbooks for the internal team.
• Comfortable working independently with junior analysts and transferring knowledge as the capability is developed.

Skills

Splunk

DLP

Alerting

Dashboards

Data correlation

Job description

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.

HCLTech is a globally recognized leader in the Tech and IT industry, but we’ve never forgotten the startup mindset that got us here. We’ve always approached our work with an idea-first attitude because every one of our accomplishments —no matter how big or small —can be traced back to an idea’s single spark.

It’s that spark —that inner drive —that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that’s what drives you to be better, be more and ultimately, be more fulfilled.

Senior Splunk and DLP Security Engineer

Location - Remote, UK

If required can travel 1- 2 days from office

Job Description

1. Senior Splunk and DLP Security Engineer

We need someone who can independently improve our DLP monitoring and alerting capability across Splunk and the wider DLP toolset.

• Strong hands-on Splunk engineering experience, including advanced SPL, multi-index correlation, drilldowns, dashboards and alert development.
• Practical experience with DLP related indexes
• Able to take multiple DLP data sources and build joined views of user activity, incidents and control outcomes.
• Experienced in tuning detection logic, reducing false positives and converting high-volume monitoring data into targeted, actionable alerts.
• Able to build operational and management reporting, with clear documentation and runbooks for the internal team.
• Comfortable working independently with junior analysts and transferring knowledge as the capability is developed.

Expected outcomes would include improved DLP dashboards, refined alerts and correlation use cases, documented searches and processes, and a sustainable reporting approach.