SIEM Engineer – Splunk & Splunk Cloud

DXC Technology Inc.; Canberra; On-site; AUD 120,000 - 170,000; Full time

Job summary

DXC Technology is seeking a SIEM Engineer with strong Splunk Enterprise and Splunk Cloud experience to join our security technology team. You’ll support enterprise SIEM environments, onboard new data sources, improve detection capabilities and ensure platform reliability.

You’ll engineer and support Splunk components, onboard security logs, develop SPL searches and dashboards, and assist SOC teams with detection and investigation needs. Expect on-call duties and cross-team collaboration.

Qualifications

• Strong Splunk Enterprise and/or Splunk Cloud experience.
• Proficient in SPL, SIEM concepts and CIM.
• Experience onboarding security logs across multiple platforms.
• Ability to troubleshoot Linux, Windows and cloud environments.
• Effective communication with stakeholders and SOC teams.

Responsibilities

• Engineer and support Splunk Enterprise and Splunk Cloud.
• Manage indexers, search heads, forwarders, apps and add-ons.
• Onboard and troubleshoot security log sources.
• Develop and tune SPL searches, alerts and dashboards.
• Support SOC teams with detection and investigation requirements.
• Troubleshoot ingestion, search and platform performance issues.
• Integrate Microsoft 365, Azure, AWS, EDR and identity data.
• Maintain technical documentation and participate in on-call roster.

Skills

Splunk Enterprise

Splunk Cloud

SPL searches

SIEM knowledge

Onboard security logs

Troubleshooting

Linux/Windows/Cloud

Stakeholder communication

Tools

Splunk CIM

Apps/Add-ons

Forwarders

Job description

Job Description:We’re looking for a SIEM Engineer with strong Splunk Enterprise and/or Splunk Cloud experience to join our security technology team. You’ll support enterprise SIEM environments, onboard new data sources, improve detection capabilities and ensure platform reliability.What You’ll DoEngineer and support Splunk Enterprise and Splunk CloudManage indexers, search heads, forwarders, apps and add-onsOnboard and troubleshoot security log sourcesDevelop and tune SPL searches, alerts and dashboardsSupport SOC teams with detection and investigation requirementsTroubleshoot ingestion, search and platform performance issuesIntegrate Microsoft 365, Azure, AWS, EDR and identity dataWork with customers, vendors and internal teamsMaintain technical documentation and proceduresParticipate in an on-call roster, typically 1–2 weeks per monthWhat You’ll BringStrong Splunk Enterprise and/or Splunk Cloud experienceStrong SPL and SIEM knowledgeExperience with Splunk CIM, apps/add-ons and forwardersExperience onboarding security logs across multiple platformsUnderstanding of SIEM, SOC operations and threat detectionExperience with syslog, APIs, JSON, XML and regular expressionsStrong troubleshooting skills across Linux, Windows and cloudStrong communication and stakeholder management skillsAbility to obtain an Australian Government Security ClearanceDesirable ExperienceGoogle SecOps and YARA-LMicrosoft Sentinel and KQLSumo Logic / Cloud SIEMMicrosoft Defender, Azure Security or AWS SecurityPalo Alto, CrowdStrike or SOAR platformsAutomation, scripting, Git or Infrastructure as CodeSplunk, Microsoft or cybersecurity certificationsAbout usDXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organisations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernisation, and Industry-Specific Software Solutions, DXC modernises, secures, and operates some of the world’s most complex technology estates. Learn more on dxc.com.Our culture and benefitsDXC is committed to building better futures for our customers, colleagues, environment, and communities. We take care of each other and foster a culture of inclusion, belonging and corporate citizenship. We put this to action developing and implementing societal initiatives within our Social Impact Practice. #WeAreDXCAs an employer of choice, our “people first” philosophy means we offer competitive remuneration, benefits, training, and career opportunities that reflect our commitment to improving the lives of our employees, and the communities in which we live and work.How to apply & our commitment to you in returnIf you would like to be part of a culture that drives innovation, delivers results, rewards performance and encourages ideas, then please press the "Apply Now" button to submit your resume.In return, we agree to ensure a hiring process that is enjoyable, thorough, and fair. We strive to provide an environment that lets you thrive and show off the very best version of yourself, while learning about us at the same time.We are an Equal Opportunity EmployerDXC is proud to be an equal opportunity employer and we welcome submissions from people from all walks of life. We celebrate our diversity and recognise it is the unique contributions of our people that give us our edge. We stand by the ‘bring your whole-self to work’ philosophy. It is our inclusive culture that powers our results, and our company grows only if our people grow.Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy. In addition, DXC Technology is committed to working with and providing reasonable accommodation to support qualified individuals with physical and mental disabilities.At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.