Job Description:

Essential Job Functions:

Monitor and manage security infrastructure and tools in scope (e.g., AV, DLP, EDR, DAM, PKI, PAM, HSM, Vulnerability Scanner, SIEM)

Receive and respond to security incidents and events via established workflows and automation tools

Act as the escalation point for infrastructure-related incidents during office hours and provide standby/on-call support

Assist in analysis, containment, and remediation of security incidents

Prepare and maintain incident records, reports, and lessons learned documentation

Conduct regular vulnerability scans and assist with patching/remediation coordination

Maintain awareness of known threats and assist in threat hunting activities

Help maintain the security risk register and support identification of recurring issues or weak points

Generate and maintain standard operating procedures (SOPs), knowledge articles, and technical documentation

Support the development of regular service and incident reports

Assist in compliance reporting and audits

Engage with internal and client teams to understand business requirements and provide technical support

Maintain awareness of industry trends and security best practices

Participate in training to improve knowledge of tools and response processes

Basic Qualifications:

Degree or diploma in Information Technology, Cybersecurity, or related field

1+ year experience in IT or security operations (internship, NOC, SOC, or IT support roles are acceptable)

Experience in working with or supporting some of the following:
  - Trellix Endpoint Security (AV, DLP, HIPS)
  - Carbon Black EDR
  - Imperva DAM
  - Microsoft PKI and Certificates
  - CyberArk and RSA 2FA
  - Tenable Nessus Security Center
  - Luna HSM (Thales)

Familiarity with network and host security technologies (EDR, AV, HIPS, DLP, Firewalls)

Basic understanding of SIEM platforms (e.g., Splunk), PKI, and log correlation

A continuous learner that stays abreast with industry knowledge and technology

Understanding of information security principles, CIA triad, and risk assessment basics

Exposure to Windows and Linux environments

Ability to create basic documentation and reports

Willingness to take initiative and learn from senior engineers

Other Qualifications:

Relevant certifications such as CompTIA Security+, CEH, or equivalent are a plus

Knowledge of Microsoft SC-900 / AZ-900 would be advantageous

Familiarity with security concepts, tools, or certifications (even entry-level) is a strong plus

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf. More information on employment scams is available here.