Join one of the world's leading defence technology organisations and play a key role protecting some of Australia's most critical national security environments. We're seeking an experienced Senior SIEM / SOAR Security Engineer to design, deploy and continuously enhance enterprise-scale cyber detection and response capabilities across complex government environments. Working alongside some of the country's best cyber professionals, you'll develop advanced detection content, automate security operations and help organisations stay ahead of an ever-evolving threat landscape. This is an outstanding opportunity for an experienced cyber specialist looking to work on meaningful, mission-critical programs with genuine long-term career progression The Opportunity: As a Senior SIEM / SOAR Security Engineer, you'll take ownership of designing, implementing and optimising enterprise detection and response capabilities across complex government ICT environments. You'll work closely with clients and technical teams to identify detection requirements, develop threat-led use cases aligned to MITRE ATT&CK, build advanced SIEM and SOAR content, and continuously improve cyber monitoring capabilities against emerging threats. This role combines deep technical expertise with stakeholder engagement, making it ideal for someone who enjoys solving complex security challenges while influencing cyber strategy and operational outcomes. Key Responsibilities: - Design, implement and optimise enterprise SIEM and SOAR capabilities. - Develop, test and deploy detection rules, analytics, playbooks and automation content. - Create threat-led detection use cases aligned with MITRE ATT&CK and evolving adversary TTPs. - Continuously assess and improve detection coverage while reducing false positives. - Support threat hunting, threat modelling and detection engineering activities. - Integrate SIEM platforms with vulnerability management, asset management and threat intelligence solutions. - Produce technical documentation including deployment, configuration and operational guides. - Support change and release management activities across production environments. - Partner closely with clients and stakeholders to understand business risk and deliver tailored cyber monitoring solutions. About You: You'll be an experienced cyber security professional with strong SIEM engineering capabilities and a passion for defending complex enterprise environments. You'll bring experience across: - Microsoft Sentinel and/or Splunk Enterprise Security. - SIEM and SOAR engineering, content development and automation. - Azure and AWS security controls within enterprise cloud environments. - Threat detection engineering and MITRE ATT&CK frameworks. - Threat intelligence, adversary TTPs and operationalising intelligence. - Security architecture, networking and TCP/IP. - Vulnerability management, asset management and security tooling integration. - Developing playbooks, detection content and security use cases. Just as importantly, you'll possess excellent consulting and stakeholder engagement skills, enjoy mentoring others and be comfortable working both independently and within multidisciplinary teams. Why Apply? - Work on highly classified, mission-critical national security programs that genuinely make a difference. - Join one of the world's most respected defence technology organisations with significant long-term investment in Australia. - Outstanding career progression with a strong promote-from-within culture and clear technical and leadership pathways. - Access industry-leading training, certifications and ongoing professional development. - Competitive salary package, annual performance bonus and comprehensive employee benefits. - Collaborate with some of Australia's most experienced cyber security professionals across large-scale enterprise environments. - Long-term program stability with exciting and technically challenging work. Security Clearance: Due to the nature of this work, applicants must hold a current NV2 Australian Government Security Clearance and be willing and eligible to undertake Positive Vetting (PV). If you're looking to work on some of Australia's most technically challenging cyber security programs while accelerating your career within a globally recognised defence organisation, we'd love to hear from you.
