Splunk Cloud SIEM Engineer: Detections & Dashboards

DXC Technology Morocco; Canberra; On-site; AUD 120,000 - 170,000; Full time

Job summary

DXC Technology is seeking a SIEM Engineer with strong Splunk Enterprise and/or Splunk Cloud experience to support enterprise SIEM environments, onboard new data sources, and improve detection capabilities while ensuring platform reliability.

You will develop SPL searches, dashboards and alerts, assist SOC teams with detection and investigation requirements, and collaborate with customers, vendors and internal teams. On-call duties are included on a regular rotation.

Qualifications

• Proven experience administering Splunk Enterprise and/or Cloud
• Strong SPL and SIEM knowledge required
• Experience with CIM, apps/add-ons and forwarders
• Experience onboarding security logs from multiple sources
• Understanding of SIEM/SOC operations and threat detection
• Proficient in Linux, Windows and cloud troubleshooting

Responsibilities

• Engineer and support Splunk Enterprise and Splunk Cloud.
• Manage indexers, search heads, forwarders, apps and add-ons.
• Onboard and troubleshoot security log sources.
• Develop and tune SPL searches, alerts and dashboards.
• Support SOC teams with detection and investigation needs.
• Troubleshoot ingestion, search and platform performance issues.
• Integrate Microsoft 365, Azure, AWS, EDR and identity data.
• Collaborate with customers, vendors and internal teams.
• Maintain technical documentation and procedures.
• Participate in an on-call roster (1–2 weeks/month).

Skills

Splunk Enterprise

Splunk Cloud

SPL

SIEM

Linux

Windows

Cloud

Communication

Tools

Splunk CIM

Splunk Apps/Add-ons

Splunk Forwarders

Job description

DXC Technology is seeking a SIEM Engineer with strong Splunk Enterprise and/or Splunk Cloud experience to support enterprise SIEM environments, onboard new data sources, and improve detection capabilities while ensuring platform reliability.

You will develop SPL searches, dashboards and alerts, assist SOC teams with detection and investigation requirements, and collaborate with customers, vendors and internal teams. On-call duties are included on a regular rotation.