Splunk SIEM Engineer (Enterprise/Cloud)

DXC Technology Inc.; Canberra; On-site; AUD 120,000 - 170,000; Full time

Job summary

DXC Technology is seeking a SIEM Engineer with strong Splunk Enterprise and Splunk Cloud experience to join our security technology team. You’ll support enterprise SIEM environments, onboard new data sources, improve detection capabilities and ensure platform reliability.

You’ll engineer and support Splunk components, onboard security logs, develop SPL searches and dashboards, and assist SOC teams with detection and investigation needs. Expect on-call duties and cross-team collaboration.

Qualifications

• Strong Splunk Enterprise and/or Splunk Cloud experience.
• Proficient in SPL, SIEM concepts and CIM.
• Experience onboarding security logs across multiple platforms.
• Ability to troubleshoot Linux, Windows and cloud environments.
• Effective communication with stakeholders and SOC teams.

Responsibilities

• Engineer and support Splunk Enterprise and Splunk Cloud.
• Manage indexers, search heads, forwarders, apps and add-ons.
• Onboard and troubleshoot security log sources.
• Develop and tune SPL searches, alerts and dashboards.
• Support SOC teams with detection and investigation requirements.
• Troubleshoot ingestion, search and platform performance issues.
• Integrate Microsoft 365, Azure, AWS, EDR and identity data.
• Maintain technical documentation and participate in on-call roster.

Skills

Splunk Enterprise

Splunk Cloud

SPL searches

SIEM knowledge

Onboard security logs

Troubleshooting

Linux/Windows/Cloud

Stakeholder communication

Tools

Splunk CIM

Apps/Add-ons

Forwarders

Job description

DXC Technology is seeking a SIEM Engineer with strong Splunk Enterprise and Splunk Cloud experience to join our security technology team. You’ll support enterprise SIEM environments, onboard new data sources, improve detection capabilities and ensure platform reliability.

You’ll engineer and support Splunk components, onboard security logs, develop SPL searches and dashboards, and assist SOC teams with detection and investigation needs. Expect on-call duties and cross-team collaboration.