SIEM Engineer – Splunk & Splunk Cloud

Posted One Month Ago
Be an Early Applicant
6 Locations
In-Office
Mid level
Information Technology
The Role
Engineer and support Splunk Enterprise and Splunk Cloud: manage platform components, onboard and troubleshoot security log sources, develop and tune SPL searches/alerts/dashboards, support SOC detection and investigations, integrate cloud/EDR/identity data, troubleshoot performance, maintain documentation, and participate in on-call rotations.
Summary Generated by Built In

Job Description:

We’re looking for a SIEM Engineer with strong Splunk Enterprise and/or Splunk Cloud experience to join our security technology team. You’ll support enterprise SIEM environments, onboard new data sources, improve detection capabilities and ensure platform reliability.

What You’ll Do

  • Engineer and support Splunk Enterprise and Splunk Cloud

  • Manage indexers, search heads, forwarders, apps and add-ons

  • Onboard and troubleshoot security log sources

  • Develop and tune SPL searches, alerts and dashboards

  • Support SOC teams with detection and investigation requirements

  • Troubleshoot ingestion, search and platform performance issues

  • Integrate Microsoft 365, Azure, AWS, EDR and identity data

  • Work with customers, vendors and internal teams

  • Maintain technical documentation and procedures

  • Participate in an on-call roster, typically 1–2 weeks per month
     

What You’ll Bring

  • Strong Splunk Enterprise and/or Splunk Cloud experience

  • Strong SPL and SIEM knowledge

  • Experience with Splunk CIM, apps/add-ons and forwarders

  • Experience onboarding security logs across multiple platforms

  • Understanding of SIEM, SOC operations and threat detection

  • Experience with syslog, APIs, JSON, XML and regular expressions

  • Strong troubleshooting skills across Linux, Windows and cloud

  • Strong communication and stakeholder management skills

  • Ability to obtain an Australian Government Security Clearance
     

Desirable Experience

  • Google SecOps and YARA-L

  • Microsoft Sentinel and KQL

  • Sumo Logic / Cloud SIEM

  • Microsoft Defender, Azure Security or AWS Security

  • Palo Alto, CrowdStrike or SOAR platforms

  • Automation, scripting, Git or Infrastructure as Code

  • Splunk, Microsoft or cybersecurity certifications

About us
DXC Technology (NYSE: DXC) is a leading enterprise technology and innovation partner delivering software, services, and solutions to global enterprises and public sector organisations — helping them harness AI to drive outcomes at a time of exponential change with speed. With deep expertise in Managed Infrastructure Services, Application Modernisation, and Industry-Specific Software Solutions, DXC modernises, secures, and operates some of the world’s most complex technology estates. Learn more on dxc.com. 
 

Our culture and benefits
DXC is committed to building better futures for our customers, colleagues, environment, and communities. We take care of each other and foster a culture of inclusion, belonging and corporate citizenship. We put this to action developing and implementing societal initiatives within our Social Impact Practice. #WeAreDXC  
 

As an employer of choice, our “people first” philosophy means we offer competitive remuneration, benefits, training, and career opportunities that reflect our commitment to improving the lives of our employees, and the communities in which we live and work.  
 

How to apply & our commitment to you in return
If you would like to be part of a culture that drives innovation, delivers results, rewards performance and encourages ideas, then please press the "Apply Now" button to submit your resume.  

In return, we agree to ensure a hiring process that is enjoyable, thorough, and fair. We strive to provide an environment that lets you thrive and show off the very best version of yourself, while learning about us at the same time.  
 

We are an Equal Opportunity Employer
DXC is proud to be an equal opportunity employer and we welcome submissions from people from all walks of life. We celebrate our diversity and recognise it is the unique contributions of our people that give us our edge. We stand by the ‘bring your whole-self to work’ philosophy. It is our inclusive culture that powers our results, and our company grows only if our people grow.  

Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy. In addition, DXC Technology is committed to working with and providing reasonable accommodation to support qualified individuals with physical and mental disabilities. 

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.

Skills Required

  • Strong Splunk Enterprise and/or Splunk Cloud experience
  • Strong SPL and SIEM knowledge
  • Experience with Splunk CIM, apps/add-ons and forwarders
  • Experience onboarding security logs across multiple platforms
  • Understanding of SIEM, SOC operations and threat detection
  • Experience with syslog, APIs, JSON, XML and regular expressions
  • Strong troubleshooting skills across Linux, Windows and cloud
  • Strong communication and stakeholder management skills
  • Ability to obtain an Australian Government Security Clearance
  • Google SecOps and YARA-L
  • Microsoft Sentinel and KQL
  • Sumo Logic / Cloud SIEM
  • Microsoft Defender, Azure Security or AWS Security
  • Palo Alto, CrowdStrike or SOAR platforms
  • Automation, scripting, Git or Infrastructure as Code
  • Splunk, Microsoft or cybersecurity certifications

DXC Technology Compensation & Benefits Highlights

The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about DXC Technology and has not been reviewed or approved by DXC Technology.

  • Healthcare Strength Health coverage includes multiple national carrier options and plan types, with HSA eligibility where applicable. Feedback suggests the medical, dental, and vision lineup is broad and comparable to large-firm offerings.
  • Retirement Support A 401(k) program with employer matching and an annual true-up is available, with standard vesting provisions. This structure can help employees capture matching contributions over the year if contribution rates vary.
  • Leave & Time Off Breadth Flexible or “unlimited” vacation is offered for many U.S. roles instead of accrual-based PTO. Feedback suggests the approach can support work-life balance when team norms allow adequate time away.

DXC Technology Insights

Am I A Good Fit?
beta
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.

The Company
HQ: Ashburn, VA
86,261 Employees
Year Founded: 2017

What We Do

DXC Technology is a Fortune 500 global IT services leader. Our more than 130,000 people in 70-plus countries are entrusted by our customers to deliver what matters most. We use the power of technology to deliver mission critical IT services across the Enterprise Technology Stack to drive business impact. DXC is an employer of choice with strong values, and fosters a culture of inclusion, belonging and corporate citizenship. We are DXC.

Similar Jobs

CrowdStrike Logo CrowdStrike

Analyst, Falcon Complete (Remote, AUS)

Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Remote or Hybrid
5 Locations
11000 Employees

CrowdStrike Logo CrowdStrike

Architect

Cloud • Computer Vision • Information Technology • Sales • Security • Cybersecurity
Remote or Hybrid
Melbourne, Victoria, AUS
11000 Employees

Ericsson Logo Ericsson

Security Director

Cloud • Information Technology • Internet of Things • Machine Learning • Software • Cybersecurity • Infrastructure as a Service (IaaS)
In-Office
Melbourne, Victoria, AUS
88000 Employees

HiBob Logo HiBob

Implementation Manager

HR Tech • Information Technology • Professional Services • Sales • Software
Remote or Hybrid
Australia
1350 Employees

Similar Companies Hiring

Axle Health Thumbnail
Artificial Intelligence • Healthtech • Information Technology • Logistics
Santa Monica, CA
25 Employees
NODA AI Thumbnail
Artificial Intelligence • Information Technology • Software • Cybersecurity
Sydney, AU
54 Employees
Golden Pet Brands Thumbnail
Digital Media • eCommerce • Information Technology • Marketing Tech • Pet • Retail • Social Media
El Segundo, California
178 Employees

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account