Principal Security Engineer Cyber Advisor Job Summary: Our client is seeking an experienced Cyber Security Advisor/SIEM-SOAR Technical Lead to support the delivery and enhancement of critical cyber security capabilities within a complex enterprise environment.

This role will focus on strengthening security monitoring, detection engineering, incident response capability, and automation across a diverse technology landscape. The successful candidate will provide expert cyber security guidance, contribute to continuous improvement initiatives, and play a key role in developing and maintaining Security Operations Centre (SOC) capabilities.

As part of an ongoing technology transformation program, our client is focused on:

Modernising core technology platforms and business applications.

Strengthening organisational cyber security maturity and resilience.

Enhancing internal processes to support the adoption of emerging technologies.

Driving continuous improvement across technology operations and service delivery.

Building stronger partnerships across industry, academia, and the broader technology community to identify opportunities and address evolving challenges.

Job Description: Cyber Security Engineer

Job Summary: Our client is seeking an experienced Cyber Security Advisor/SIEM-SOAR Technical Lead to support the delivery and enhancement of critical cyber security capabilities within a complex enterprise environment.

This role will focus on strengthening security monitoring, detection engineering, incident response capability, and automation across a diverse technology landscape. The successful candidate will provide expert cyber security guidance, contribute to continuous improvement initiatives, and play a key role in developing and maintaining Security Operations Centre (SOC) capabilities.

As part of an ongoing technology transformation program, our client is focused on:

Modernising core technology platforms and business applications.

Strengthening organisational cyber security maturity and resilience.





Enhancing internal processes to support the adoption of emerging technologies.

Driving continuous improvement across technology operations and service delivery.

Building stronger partnerships across industry, academia, and the broader technology community to identify opportunities and address evolving challenges.

What’s in it for you?

$1200/day rate

Collaborative and high-performing team environment.

Exposure to complex security operations and enterprise-scale cyber programs.

Long-term opportunity to contribute to the growth and maturity of a critical cyber security capability.

What will you be doing?

Designing and implementing the onboarding of log sources into enterprise SIEM platforms across cloud, on-premises, identity, endpoint, and network environments.

Developing and maintaining log parsing, normalisation standards, and data quality controls.

Building and enhancing SOAR workflows to automate alert triage, enrichment, containment, and response activities.

Integrating SIEM and SOAR platforms with security and enterprise systems.

Developing, tuning, and maintaining high-quality detection rules aligned to emerging threats, attack techniques, and organisational risk profiles.

Creating and maintaining SOC operating procedures, playbooks, and automated response workflows.

Continuously improving detection accuracy through alert tuning, enrichment, and optimisation activities.

Supporting cyber incident response activities through log analysis, threat detection, and rapid development of detection content.





Conducting detection gap assessments following security incidents and threat intelligence updates.

Maintaining the health, performance, and configuration of SIEM and SOAR platforms.

Developing dashboards, reporting capabilities, and platform monitoring solutions.

Producing clear technical documentation, operational procedures, and knowledge transfer artefacts to support ongoing capability uplift.

Establishing and reporting on key security operations metrics such as Mean Time to Detect (MTTD), Mean Time to Respond (MTTR), alert quality, automation effectiveness, and MITRE ATT&CK; coverage.

Skills and experience required to succeed in this role?

Experience leading the implementation, administration, and optimisation of enterprise SIEM platforms.

Strong experience designing and implementing SOAR capabilities and security automation workflows.

Advanced capability in writing complex queries, detection rules, correlation logic, parsers, and analytics content.

Proven experience developing and maintaining SOC playbooks, operational procedures, and incident response workflows.

Demonstrated ability to integrate SIEM and SOAR platforms with a range of enterprise security and operational technologies.

Experience tuning detection content to minimise false positives and improve alert quality and operational effectiveness.

Solid analytical and problem-solving skills within complex cyber security environments.

Excellent stakeholder engagement, communication, and documentation skills.

Experience working within large-scale enterprise or government environments will be highly regarded.

Work onsite in Canberra, ACT.

Clearance required?

NV1 Clearance or above.

We are an inclusive employer committed to fostering a diverse and accessible workplace. We encourage applications from Aboriginal and Torres Strait Islander peoples, people with disabilities, LGBTQIA+ individuals, people of all ages, and those from culturally and linguistically diverse backgrounds.

#J-18808-Ljbffr

📌 Principal Security Engineer Cyber Advisor (Yarralumla)
🏢 Emanate Technology
📍 Yarralumla