Sr. Splunk Engineer
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
DXC Technology is seeking a Sr. Splunk Engineer to design and implement end-to-end Splunk solutions, develop custom correlation rules and dashboards, and support security monitoring and incident response.
Key Skills for This Role
Responsibilities
- Design and implement end to end Splunk solutions including data ingestion, parsing, indexing, and search optimization
- Develop and maintain custom correlation rules, alerts, dashboards, and visualizations to support security monitoring and incident response
- Onboard new log sources from infrastructure, security, application, and cloud systems using best practices (e.g., via UF, HF, syslog, APIs)
- Perform regular health checks, indexer and search head performance tuning, license usage monitoring, and configuration backups
- Support threat detection initiatives by translating security use cases into actionable Splunk queries and alerts
- Assist in troubleshooting ingestion failures, parsing errors, and inefficient searches
- Collaborate with SOC, threat intelligence, and infrastructure teams to ensure data relevance, completeness, and quality
- Maintain Splunk Enterprise Security (ES) configurations, including CIM compliance, notables, and risk based alerting (RBA)
- Implement and manage data retention policies and storage utilization in line with compliance requirements
- Automate tasks and processes using scripts (Python, Bash, PowerShell) and configuration management tools where needed
- Provide technical guidance and mentoring to junior Splunk engineers and analysts
Requirements
- 5+ years of hands on experience in SIEM engineering with at least 3 years focused on Splunk Enterprise or Splunk Cloud
- Proficient in SPL (Search Processing Language), data onboarding, and CIM normalization
- Experience integrating diverse log sources including firewalls, endpoints, cloud (AWS, Azure), identity systems, and threat intel feeds
- Strong understanding of security operations, detection engineering, and incident response workflows
- Experience with scripting and automation (Python, Bash, PowerShell)
- Good knowledge of networking, security protocols, and system administration (Windows/Linux)
- Exposure to regulatory and compliance requirements such as ISO 27001, NCA, SAMA, PCI DSS, etc.
Full Job Posting
Key Responsibilities
- Design and implement end to end Splunk solutions including data ingestion, parsing, indexing, and search optimization.
- Develop and maintain custom correlation rules, alerts, dashboards, and visualizations to support security monitoring and incident response.
- Onboard new log sources from infrastructure, security, application, and cloud systems using best practices (e.g., via UF, HF, syslog, APIs).
- Perform regular health checks, indexer and search head performance tuning, license usage monitoring, and configuration backups.
- Support threat detection initiatives by translating security use cases into actionable Splunk queries and alerts.
- Assist in troubleshooting ingestion failures, parsing errors, and inefficient searches.
- Collaborate with SOC, threat intelligence, and infrastructure teams to ensure data relevance, completeness, and quality.
- Maintain Splunk Enterprise Security (ES) configurations, including CIM compliance, notables, and risk based alerting (RBA).
- Implement and manage data retention policies and storage utilization in line with compliance requirements.
- Automate tasks and processes using scripts (Python, Bash, PowerShell) and configuration management tools where needed.
- Provide technical guidance and mentoring to junior Splunk engineers and analysts.
Required Skills & Experience
- 5+ years of hands on experience in SIEM engineering with at least 3 years focused on Splunk Enterprise or Splunk Cloud.
- Proficient in SPL (Search Processing Language), data onboarding, and CIM normalization.
- Experience integrating diverse log sources including firewalls, endpoints, cloud (AWS, Azure), identity systems, and threat intel feeds.
- Strong understanding of security operations, detection engineering, and incident response workflows.
- Familiarity with Splunk ES, UBA, ITSI, and SOAR (preferred but not mandatory).
- Experience with scripting and automation (Python, Bash, PowerShell).
- Good knowledge of networking, security protocols, and system administration (Windows/Linux).
- Exposure to regulatory and compliance requirements such as ISO 27001, NCA, SAMA, PCI DSS, etc.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at DXC Technology
RR-0317502 - Command Center 14 Analyst II
Riyadh, KSA
DXC Technology seeks a Command Center Analyst II to provide foundational technical support in infrastructure services. The role involves monitoring, troubleshooting, and assisting with infrastructure projects. Candidates
RR-0317502 - Command Center 14 Analyst II
الرياض, KSA
DXC Technology is looking for a Command Center Analyst II to provide foundational technical support in infrastructure services, assist with monitoring and troubleshooting, and collaborate on daily operational tasks. The
ServiceNow Business Analyst Lead
United Arab Emirates, UAE
The role involves gathering requirements for ServiceNow enhancements, translating them into user stories, and supporting backlog-driven delivery with a focus on ITSM and HRSD.
ServiceNow Change & Release Manager
Dubai, UAE
DXC Technology seeks a ServiceNow Change & Release Manager to oversee planning, coordination, and governance of platform changes and releases within a large-scale ServiceNow environment. The role requires 6-10+ years of
ServiceNow Business Analyst Lead
Dubai, UAE
DXC Technology is seeking a ServiceNow Business Analyst Lead to support the continuous development and enhancement of ServiceNow platform capabilities. The role involves capturing requirements, translating them into user
ServiceNow Business Analyst Lead
Dubai, UAE
DXC Technology is seeking a ServiceNow Business Analyst Lead to drive the continuous development and enhancement of ServiceNow platform capabilities. The role involves capturing requirements, shaping user stories, and su
ServiceNow Change & Release Manager
Dubai, UAE
DXC Technology seeks a ServiceNow Change & Release Manager to oversee platform changes and releases within a large-scale ServiceNow environment. The role involves managing change governance, release planning, and deploym
ServiceNow Strategy Advisor
Abu Dhabi Emirate, UAE
DXC Technology seeks a ServiceNow Strategy Advisor to provide strategic guidance and platform advisory for a large-scale ServiceNow Center of Excellence. You will align solutions with best practices, advise on platform e
RR-0317502 - Command Center 14 Analyst II
Riyadh, KSA
RR-0317502 - Command Center 14 Analyst II
الرياض, KSA
ServiceNow Business Analyst Lead
United Arab Emirates, UAE
ServiceNow Change & Release Manager
Dubai, UAE
ServiceNow Business Analyst Lead
Dubai, UAE
ServiceNow Business Analyst Lead
Dubai, UAE
ServiceNow Change & Release Manager
Dubai, UAE
ServiceNow Strategy Advisor
Abu Dhabi Emirate, UAE