Security Engineer | Microsoft Security & SIEM

Canberra, ACT | Contract Opportunity | Federal Government Environment

Are you an experienced Security Engineer looking to make a meaningful impact while working at the forefront of cybersecurity?

Our client is seeking a highly capable Security Engineer to join their IT Security team and play a key role in strengthening security operations, improving cyber resilience, and driving security uplift initiatives across a mission-critical environment.

This is a hands-on role where you'll have the opportunity to shape security strategy while actively implementing and managing security technologies, processes, and automation.

You'll work closely with stakeholders across technology, business teams, and government partners to deliver robust security outcomes.

About the Organisation

Our client is a nationally significant organisation dedicated to creating safer online experiences for Australians. Working alongside government agencies, industry leaders, and community partners, they help address emerging cyber threats and digital harms while supporting a safer digital future.

This is an opportunity to join a purpose-driven organisation where your expertise will contribute to protecting Australians in an increasingly complex cyber landscape.

What You'll Be Doing

- Configure, maintain and troubleshoot log source integrations into Microsoft Sentinel
- Develop security monitoring use cases, alerting rules, and threat response playbooks
- Create and optimise KQL queries for investigations, threat hunting, and traffic analysis
- Administer and maintain cybersecurity technologies including:
- SIEM/SOAR platforms
- Web Application Firewalls (WAF)
- Data Loss Prevention (DLP)




- Vulnerability Management solutions
- Proxy technologies
- Application Whitelisting technologies
- Integrate new security data sources and automate response workflows
- Support cyber incident detection, triage and response activities
- Ensure alignment with Australian Government security frameworks,
- Mentor junior team members and contribute to a culture of continuous improvement
- Partner with business stakeholders and project teams on cyber uplift initiatives

Essential Skills & Experience

- Minimum 5 years' experience working across the Microsoft security ecosystem
- Strong experience with Microsoft Sentinel,Microsoft Intune, Entra ID (Azure Active Directory), Microsoft Purview, Microsoft 365 Security technologies
- Proven experience operating, maintaining and automating SIEM platforms
- Solid knowledge of security operations, detection engineering, and incident response
- Experience delivering cyber security uplift initiatives and engaging business stakeholders
- Practical experience implementing and managing controls
- Relevant cybersecurity certifications

Highly Regarded
- Experience with Microsoft Sentinel, Splunk, Rapid7, Airlock or similar technologies
- Exposure to Zscaler
- Incident response and threat hunting experience
- Broader experience across Security Operations (SecOps) and Governance, Risk & Compliance (GRC)

Security Clearance Requirements To be considered, applicants must be Australian Citizens and be eligible to obtain a Negative Vetting 1 (NV1) Security Clearance . This is an initial 12 months contract based in Canberra ACT - NSW based candidate will be considered (some travel will be required)

Interested? Apply now sending your CV to Silvia at Balance Recruitment

📌 Cyber Security Engineer (Canberra)
🏢 Balance Recruitment and Balance Consulting
📍 Canberra