At a Glance
- Tasks: Engineer and support Splunk environments, onboard data sources, and enhance detection capabilities.
- Company: Join DXC Technology, a leader in enterprise tech and innovation.
- Benefits: Competitive pay, flexible work options, and career growth opportunities.
- Other info: Inclusive culture that values diversity and supports personal growth.
- Why this job: Make a real impact in cybersecurity while working with cutting-edge technologies.
- Qualifications: Experience with Splunk, SIEM knowledge, and strong troubleshooting skills.
The predicted salary is between 90000 - 110000 $ per year.
We’re looking for a SIEM Engineer with strong Splunk Enterprise and/or Splunk Cloud experience to join our security technology team. You’ll support enterprise SIEM environments, onboard new data sources, improve detection capabilities and ensure platform reliability.
What You’ll Do
- Engineer and support Splunk Enterprise and Splunk Cloud
- Manage indexers, search heads, forwarders, apps and add-ons
- Onboard and troubleshoot security log sources
- Develop and tune SPL searches, alerts and dashboards
- Support SOC teams with detection and investigation requirements
- Troubleshoot ingestion, search and platform performance issues
- Integrate Microsoft 365, Azure, AWS, EDR and identity data
- Work with customers, vendors and internal teams
- Maintain technical documentation and procedures
- Participate in an on-call roster, typically 1–2 weeks per month
What You’ll Bring
- Strong Splunk Enterprise and/or Splunk Cloud experience
- Strong SPL and SIEM knowledge
- Experience with Splunk CIM, apps/add-ons and forwarders
- Experience onboarding security logs across multiple platforms
- Understanding of SIEM, SOC operations and threat detection
- Experience with syslog, APIs, JSON, XML and regular expressions
- Strong troubleshooting skills across Linux, Windows and cloud
- Strong communication and stakeholder management skills
- Ability to obtain an Australian Government Security Clearance
Desirable Experience
- Google SecOps and YARA-L
- Microsoft Sentinel and KQL
- Sumo Logic / Cloud SIEM
- Microsoft Defender, Azure Security or AWS Security
- Palo Alto, CrowdStrike or SOAR platforms
- Automation, scripting, Git or Infrastructure as Code
- Splunk, Microsoft or cybersecurity certifications
Siem Engineer in Canberra employer: DXC Technology Morocco
At DXC Technology, we pride ourselves on being an exceptional employer, particularly for our SAP Technical Consultant graduates in Brisbane. Our inclusive work culture fosters collaboration and innovation, providing ample opportunities for professional growth while prioritising employee wellbeing through flexible work arrangements. Join us to be part of a community that values strong connections and supports your journey in cloud-based technology and automation.
