Senior Splunk & DLP Security Engineer — Dashboards & Alerts

Vbeyond; City Of London; Hybrid; GBP 85,000 - 125,000; Full time

Benefits offered by this job

Hybrid working

Onsite London office

Job summary

Vbeyond is seeking an experienced Senior Splunk and DLP Security Engineer to enhance DLP monitoring, alerting and reporting across Splunk and the DLP toolset. You will develop advanced SPL, correlate multiple data sources, and build dashboards and alerts to improve monitoring effectiveness.

You will also mentor junior analysts, share knowledge and ensure runbooks and documentation are maintained for sustainable operations. Hybrid London-based role with three onsite days per week.

Qualifications

• Strong hands-on Splunk engineering experience.
• Advanced SPL skills, including complex searches and multi-index correlation.
• Experience building Splunk dashboards, drilldowns and alerts.
• Practical experience working with DLP-related indexes and data sources.
• Ability to correlate multiple DLP data sources into meaningful views of user activity, incidents and control outcomes.
• Experience tuning detection logic and reducing false-positive alerts.
• Ability to translate high-volume monitoring data into targeted, actionable security alerts.
• Experience developing operational dashboards and management reporting.
• Strong documentation skills, including search documentation, operational procedures and runbooks.
• Ability to work independently, manage technical improvements and transfer knowledge to junior analysts.

Responsibilities

• Develop and optimise advanced Splunk searches using SPL, including multi-index correlation.
• Analyse DLP-related indexes and integrate multiple DLP data sources to create joined views of user activity, incidents and control outcomes.
• Build and enhance Splunk dashboards to support operational monitoring and management reporting.
• Review and tune detection logic to reduce false positives and convert high-volume monitoring data into targeted alerts.
• Develop and refine DLP correlation searches and detection use cases to improve monitoring effectiveness.
• Create clear documentation covering searches, dashboards, alert logic, correlation use cases and operational processes.
• Produce and maintain runbooks to support consistent operations and knowledge retention within the internal team.
• Work independently to identify monitoring improvements and deliver practical enhancements across the DLP capability.
• Support junior analysts through technical guidance, knowledge sharing and knowledge transfer.
• Establish a sustainable approach to DLP reporting, alerting and ongoing monitoring improvements.

Skills

Splunk engineering

Advanced SPL

Dashboards

DLP data sources

Multi-source correlation

Alert tuning

Security alerting

Operational dashboards

Documentation

Knowledge transfer

Job description

Vbeyond is seeking an experienced Senior Splunk and DLP Security Engineer to enhance DLP monitoring, alerting and reporting across Splunk and the DLP toolset. You will develop advanced SPL, correlate multiple data sources, and build dashboards and alerts to improve monitoring effectiveness.

You will also mentor junior analysts, share knowledge and ensure runbooks and documentation are maintained for sustainable operations. Hybrid London-based role with three onsite days per week.