Security Engineer | Microsoft Security & SIEM

Canberra, ACT or NSW | Contract Opportunity | Federal Government Environment

Are you an experienced Security Engineer looking to make a meaningful impact while working at the forefront of cybersecurity?

Our client is seeking a highly capable Security Engineer to join their IT Security team and play a key role in strengthening security operations, improving cyber resilience, and driving security uplift initiatives across a mission-critical environment.

This is a hands-on role where you'll have the opportunity to shape security strategy while actively implementing and managing security technologies, processes, and automation.

You'll work closely with stakeholders across technology, business teams, and government partners to deliver robust security outcomes.

About the Organisation

Our client is a nationally significant organisation dedicated to creating safer online experiences for Australians. Working alongside government agencies, industry leaders, and community partners, they help address emerging cyber threats and digital harms while supporting a safer digital future.

This is an opportunity to join a purpose-driven organisation where your expertise will contribute to protecting Australians in an increasingly complex cyber landscape.

What You'll Be Doing

As the Security Engineer, you will:

- Configure, maintain and troubleshoot log source integrations into Microsoft Sentinel
- Develop security monitoring use cases, alerting rules, and threat response playbooks
- Create and optimise KQL queries for investigations, threat hunting, and traffic analysis
- Administer and maintain cybersecurity technologies including:

- SIEM/SOAR platforms
- Web Application Firewalls (WAF)
- Data Loss Prevention (DLP)
- Vulnerability Management solutions
- Proxy technologies
- Application Whitelisting technologies




- Integrate new security data sources and automate response workflows
- Support cyber incident detection, triage and response activities
- Ensure alignment with Australian Government security frameworks, including:

- Information Security Manual (ISM)
- Protective Security Policy Framework (PSPF)
- Essential Eight (E8)
- Partner with business stakeholders and project teams on cyber uplift initiatives

Essential Skills & Experience

- Minimum 5 years' experience working across the Microsoft security ecosystem
- Strong experience with:

- Microsoft Sentinel
- Microsoft Intune
- Entra ID (Azure Active Directory)
- Microsoft Purview
- Microsoft 365 Security technologies
- Proven experience operating, maintaining and automating SIEM platforms
- Solid knowledge of security operations, detection engineering, and incident response
- Experience delivering cyber security uplift initiatives and engaging business stakeholders
- Practical experience implementing and managing controls aligned to:

- ISM
- PSPF
- Essential Eight
- Relevant cybersecurity certifications

Highly Regarded
- Experience with Microsoft Sentinel, Splunk, Rapid7, Airlock or similar technologies
- Exposure to Zscaler
- Incident response and threat hunting experience
- Broader experience across Security Operations (SecOps) and Governance, Risk & Compliance (GRC)

Security Clearance Requirements

To be considered, applicants must be Australian Citizens and be eligible to obtain a Negative Vetting 1 (NV1) Security Clearance.

Additional Requirements

- National Police Check
- Identity Verification Checks

Interested? Apply now sending your CV to Silvia at Balance Recruitment

Balance Recruitment is committed to equal opportunity employment. We celebrate diversity and encourage people from all sections of our community to apply for this role.

If this role is located in Victoria, this posting was placed on behalf of Balance Consulting Services who will provide all services related to the recruitment of this position ( ).

📌 Cyber Security Engineer - Microsoft Sentinel & SIEM (Sydney)
🏢 Balance Recruitment
📍 Sydney