Cyber Security Engineer - Microsoft Sentinel & SIEM
Security Engineer | Microsoft Security & SIEM
Canberra, ACT or NSW | Contract Opportunity | Federal Government Environment
Are you an experienced Security Engineer looking to make a meaningful impact while working at the forefront of cybersecurity?
Our client is seeking a highly capable Security Engineer to join their IT Security team and play a key role in strengthening security operations, improving cyber resilience, and driving security uplift initiatives across a mission-critical environment.
This is a hands‐on role where you'll have the opportunity to shape security strategy while actively implementing and managing security technologies, processes, and automation.
You'll work closely with stakeholders across technology, business teams, and government partners to deliver robust security outcomes.
About the Organisation
Our client is a nationally significant organisation dedicated to creating safer online experiences for Australians.
Working alongside government agencies, industry leaders, and community partners, they help address emerging cyber threats and digital harms while supporting a safer digital future.
This is an opportunity to join a purpose‐driven organisation where your expertise will contribute to protecting Australians in an increasingly complex cyber landscape.
What You'll Be Doing
As the Security Engineer, you will:
Configure, maintain and troubleshoot log source integrations into Microsoft Sentinel
Develop security monitoring use cases, alerting rules, and threat response playbooks
Create and optimise KQL queries for investigations, threat hunting, and traffic analysis
Administer and maintain cybersecurity technologies including:SIEM/SOAR platforms
Web Application Firewalls (WAF)
Data Loss Prevention (DLP)




Vulnerability Management solutions
Proxy technologies
Application Whitelisting technologies
Integrate current security data sources and automate response workflows
Support cyber incident detection, triage and response activities
Ensure alignment with Australian Government security frameworks, including:Information Security Manual (ISM)
Protective Security Policy Framework (PSPF)
Essential Eight (E8)
Partner with business stakeholders and project teams on cyber uplift initiatives
Essential Skills & Experience
Minimum 5 years' experience working across the Microsoft security ecosystem
Strong experience with:Microsoft Sentinel
Microsoft Intune
Entra ID (Azure Active Directory)
Microsoft Purview
Microsoft 365 Security technologies
Proven experience operating, maintaining and automating SIEM platforms
Strong knowledge of security operations, detection engineering, and incident response
Experience delivering cyber security uplift initiatives and engaging business stakeholders
Practical experience implementing and managing controls aligned to:ISM
PSPF
Essential Eight
Relevant cybersecurity certifications
Highly Regarded
Experience with Microsoft Sentinel, Splunk, Rapid7, Airlock or similar technologies
Exposure to Zscaler
Incident response and threat hunting experience
Broader experience across Security Operations (SecOps) and Governance, Risk & Compliance (GRC)
Security Clearance Requirements
To be considered, applicants must be Australian Citizens and be eligible to obtain a Negative Vetting 1 (NV1) Security Clearance.
Additional Requirements
National Police Check
Identity Verification Checks
Balance Recruitment is committed to equal opportunity employment.
We celebrate diversity and encourage people from all sections of our community to apply for this role.
#J-*****-Ljbffr

📌 Cyber Security Engineer - Microsoft Sentinel & Siem (New South Wales)
🏢 Balance Recruitment
📍 New South Wales