We are seeking a Security Operations Engineer/Specialist to join a forward-thinking team dedicated to protecting sensitive information and systems. We’re looking for a technical expert who thrives on actively monitoring, detecting, and responding to cyber threats while continuously improving detection and response capabilities. In this role, you will leverage platforms including Microsoft Sentinel and Defender, investigate security alerts, and develop detection use cases to address emerging threats. Your hands-on expertise will make a direct and significant impact on the organisation’s ability to prevent, detect, and respond to cyber incidents.
As a Security Operations Engineer/Specialist, you will:
- Monitor and Detect Threats: Configure and optimise security monitoring platforms, develop analytics rules, and create dashboards to detect malicious activity.
- Conduct Threat Hunting: Proactively identify and mitigate threats using telemetry and intelligence, refining detection capabilities to keep pace with evolving risks.
- Respond to Incidents: Lead investigations, containment, eradication, and recovery efforts for cyber security incidents, including root cause analysis and remediation.
- Perform Security Analysis: Analyse logs and alerts across enterprise and cloud environments, triaging and prioritising incidents based on risk and impact.
- Automate Responses: Develop and maintain automation playbooks and scripts to enhance security operations efficiency.
- Manage Vulnerabilities: Assess and prioritise vulnerabilities, collaborating with DevOps and development teams to ensure timely resolution.
- Utilise Threat Intelligence: Incorporate intelligence into detection use cases, analytics rules, and threat-hunting activities.
- Optimise Security Tools: Configure, maintain, and improve security tools and platforms while identifying opportunities for automation and integration.
- Collaborate and Improve: Work closely with development and DevOps teams to strengthen detection and response capabilities through system design enhancements.
- Support Governance: Maintain operational documentation and align activities with Whole-of-Australian-Government (WoAG) policies, including the ISM and Essential Eight.
Candidates with experience in the following skills and expereinces are encouraged to apply
- Hands-on experience in security monitoring, incident response, threat analysis, and investigations in enterprise or cloud environments.
- Expertise in working with SIEM/SOAR platforms, ideally Microsoft Sentinel, including the development of analytics rules, KQL queries, alert tuning, and dashboards.
- Proficiency in incident detection and response, including triaging alerts, investigating events, and performing root cause analysis.
- Experience with security automation and scripting to enhance orchestration and response activities.
- A strong understanding of cloud environments, preferably Microsoft Azure, with knowledge of logging, monitoring, and security controls.
- Familiarity with cyber security frameworks and best practices, including alignment with WoAG policies such as the ISM and Essential Eight.
Whats on Offer
- Long term contract with extension options
- Federal Government Contract
- Hybrid working arrangements
- Great Hourly Rates
Due to the nature of this role, this job is open to Australian Citizens with Negative Vetting 1 clearances or above
Calleo is an equal opportunity employer and we encourage applications from all people including Aboriginal and Torres Strait Islander peoples.
Follow Calleo on LinkedIn and visit our website to keep up to date on all our current job vacancies:
www.linkedin.com/company/calleoresourcing
www.calleo.com.au
