Siem Engineer – Splunk & Splunk Cloud

DXC Technology Morocco; Sydney; Presencial; AUD 120 000 - 170 000; Tempo integral

Resumo da oferta

DXC Technology is seeking a SIEM Engineer with strong Splunk Enterprise and Splunk Cloud experience to support enterprise SIEM environments in Sydney. You will onboard data sources, tune SPL searches, and help SOC teams with detection and investigations.

The role involves collaborating with customers, vendors, and internal teams, plus participating in an on-call roster. Strong communication and willingness to obtain an Australian Government Security Clearance are essential.

Qualificações

• Solid experience with Splunk Enterprise and Splunk Cloud in enterprise environments.
• Strong knowledge of SPL and SIEM concepts.
• Experience onboarding security logs across multiple platforms.
• Ability to obtain an Australian Government Security Clearance.

Responsabilidades

• Engineer and support Splunk Enterprise and Splunk Cloud.
• Manage indexers, search heads, forwarders, apps and add-ons.
• Onboard and troubleshoot security log sources.
• Develop and tune SPL searches, alerts and dashboards.
• Support SOC teams with detection and investigation requirements.
• Work with customers, vendors and internal teams.
• Participate in an on-call roster (1–2 weeks per month).

Conhecimentos

Splunk Enterprise

Splunk Cloud

SPL

SIEM

CIM

Apps/Add-ons

Forwarders

Syslog

APIs

JSON

XML

Regular expressions

Linux

Windows

Cloud

SOC operations

Threat detection

Communication

Stakeholder management

Australian Government Security Clearan

Ferramentas

Splunk CIM

Splunk Apps/Add-ons

Splunk Forwarders

Syslog

APIs

JSON

XML

Regular expressions

Descrição da oferta de emprego

Job Description

We’re looking for a SIEM Engineer with strong Splunk Enterprise and/or Splunk Cloud experience to join our security technology team. You’ll support enterprise SIEM environments, onboard new data sources, improve detection capabilities and ensure platform reliability.

What You’ll Do

• Engineer and support Splunk Enterprise and Splunk Cloud
• Manage indexers, search heads, forwarders, apps and add-ons
• Onboard and troubleshoot security log sources
• Develop and tune SPL searches, alerts and dashboards
• Support SOC teams with detection and investigation requirements
• Troubleshoot ingestion, search and platform performance issues
• Integrate Microsoft 365, Azure, AWS, EDR and identity data
• Work with customers, vendors and internal teams
• Maintain technical documentation and procedures
• Participate in an on-call roster, typically 1–2 weeks per month

What You’ll Bring

• Strong Splunk Enterprise and/or Splunk Cloud experience
• Strong SPL and SIEM knowledge
• Experience with Splunk CIM, apps/add-ons and forwarders
• Experience onboarding security logs across multiple platforms
• Understanding of SIEM, SOC operations and threat detection
• Experience with syslog, APIs, JSON, XML and regular expressions
• Strong troubleshooting skills across Linux, Windows and cloud
• Strong communication and stakeholder management skills
• Ability to obtain an Australian Government Security Clearance

Desirable Experience

• Google SecOps and YARA-L
• Microsoft Sentinel and KQL
• Sumo Logic / Cloud SIEM
• Microsoft Defender, Azure Security or AWS Security
• Palo Alto, CrowdStrike or SOAR platforms
• Automation, scripting, Git or Infrastructure as Code
• Splunk, Microsoft or cybersecurity certifications

About us

DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organisations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernisation, and Industry-Specific Software Solutions, DXC modernises, secures, and operates some of the world’s most complex technology estates. Learn more on *******.

Our culture and benefits

DXC is committed to building better futures for our customers, colleagues, environment, and communities. We take care of each other and foster a culture of inclusion, belonging and corporate citizenship. We put this to action developing and implementing societal initiatives within our Social Impact Practice. #WeAreDXC

As an employer of choice, our “people first” philosophy means we offer competitive remuneration, benefits, training, and career opportunities that reflect our commitment to improving the lives of our employees, and the communities in which we live and work.

We are an Equal Opportunity Employer

DXC is proud to be an equal opportunity employer and we welcome submissions from people from all walks of life. We celebrate our diversity and recognise it is the unique contributions of our people that give us our edge. We stand by the ‘bring your whole-self to work’ philosophy. It is our inclusive culture that powers our results, and our company grows only if our people grow.

Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy. In addition, DXC Technology is committed to working with and providing reasonable accommodation to support qualified individuals with physical and mental disabilities.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.