Overview:Role: Principal Security EngineerClient: Australian Federal PoliceProposed Rate & term - $170 per hour including Super | 36 month contractLocation & work arrangements - Canberra | Hybrid, in office requiredSecurity Clearance: Must be able to obtain Negative Vetting Level 1 Clearance (AFP Specific)
Key duties and responsibilities
The Services, delivered in collaboration with and under supervision by nominated AFP personnel, include, but are not limited to, the following:Design and implement onboarding of log sources into the SIEM from cloud, on-premise, identity, endpoint, and network platformsDevelop and maintain parsing, normalisation, and data quality standards for logsBuild and maintain SOAR workflows to automate alert triage, enrichment, containment, and responseIntegrate SIEM and SOAR platforms with security and IT tooling including EDR, IAM, ticketing, email, firewall, and threat intelligence systemsDevelop, tune, and maintain high-quality detection rules aligned to threat detection capability, attacker techniques and organisational risk.Create and maintain SOC playbooks and operational runbooks mapped to automated workflowsReduce false positives and improve alert fidelity through continuous tuning and enrichmentSupport incident response through log analysis, detection insights, and rapid rule developmentConduct detection gap analysis following cyber events, incidents, and threat intelligence updatesMaintain performance, reliability, and configuration of SIEM/SOAR platformsImplement dashboards for monitoring and health checks for the SIEM/SOAR platformsDevelop and maintain explicit, accessible documentation for analysts, and capture system knowledge to support ongoing operations and knowledge transfer.Define and report on key detection and response performance metrics (e.g. MTTD, MTTR, alert quality, automation or MITRE coverage) to assess effectiveness and inform continuous improvement initiatives.
As part of the services, the seller must ensure the specified personnelMaintains currency in information technology processes and technical knowledge through ongoing professional development.Establishes and maintains effective business relationships and professional networks.Contributes to and implements improved ICT practices and procedures.Provides mentoring, coaching and training.Works effectively in a small team environment, and wider Command setting.Remains accountable for accurate completion of work within timeframes and quality requirements,



shares own expertise with others and guides and mentors less experienced buyer employees; andRecords and maintains files/information in accordance with buyer requirements.
AFP Work Level Standards
AFP Band 8 Work Level Standards to apply.
The AFP reserves the right to engage further suppliers for the same services if required utilising this RFQ.
Any offer of engagement will be made within 6-months of the RFQ release date.
Technical skillsTechnical skills candidates would need to have (including but not limited to) are listed below:Demonstrated hands-on experience as a tech lead implementing and administering enterprise SIEM platforms such as Microsoft Sentinel/Windows Defender, IBM Qradar, Elastic or Splunk with strong experience in automation, writing complex queries, correlation rules, parsers and developing SOC playbooksProven ability to optimise and integrate SIEM platforms, reduce false positives and improve alert quality.
About the team
Technology:
Technology is a critical enabler of the AFP's operational and corporate services to ensure that we achieve our purpose.
We use technology to assist frontline policing and protective services through direct tactical interventions in investigations, and to strategically maintain, sustain and evolve our foundational technology platforms and architecture.
We are continuing to develop this capability by: modernising the AFP's technology foundations and applications, and increasing the cyber-security position of the organisation evolving our internal processes to navigate the development and deployment of emerging technologies.continuing to mature our use of technology across the 6 strategic shifts outlined in our AFP Technology Strategy ****enhancing our collaboration with academic institutions, police forces and the technology sector to understand technological challenges and opportunities to strengthen law enforcement capabilities.
About Arctic Fox
Powering the Federal Digital MarketplaceArctic Fox is a premier panel supplier on the Federal Government's Digital Marketplace, dedicated to sourcing and placing exceptional talent across all Federal Government Departments.




We bridge the gap between complex national objectives and the specialised human capital required to achieve them.
Our approach is distinct because it is rooted in practice, not just theory.
As practising Project Delivery professionals, we possess a genuine understanding and appreciation for the work our contractors undertake.
We don't just read position descriptions; we understand the nuances of the delivery lifecycle.
This peer-to-peer perspective allows us to leverage our practical experience in business and technology transformation to identify candidates who can truly deliver value from day one.
A Holistic Service for Government & ContractorsWe provide comprehensive, end-to-end contract management, covering everything from payroll to insurance, ensuring a seamless experience for both the Department and the Contractor.
However, our value proposition extends far beyond administration.
We recognise that the Federal Government application process is unique and rigorous.
To ensure our candidates put their best foot forward, we provide holistic support throughout the application lifecycle:Collaborative Brief Review: We don't just forward CVs.
We complete a collaborative review of the client brief with each candidate, ensuring a deep alignment between the candidate's capabilities and the specific opportunity.Selection Criteria Expertise: We undertake a thorough review of selection criteria responses.
Our team provides critical feedback, insight, guidance, and editing services to ensure the candidate's expertise is articulated clearly and complies with government standards.
At Arctic Fox, we provide candidates with comprehensive support throughout the entire application process.
We offer detailed guidance on how to address selection criteria, and we further support your success by providing personalised reviews, actionable feedback, and expert insights on your draft responses
The Arctic Fox Integrity Pledge: Open CostbooksIn an industry often critiqued for opacity, Arctic Fox is committed to radical transparency.
We operate with an Open Costbook Policy.Our Guarantee: We are open and transparent with all information regarding margins and on-costs.
We provide a full breakdown to candidates to give absolute assurance that excessive margins are never placed on top of their contracted rate.
By combining deep domain expertise with a commitment to fiscal transparency and candidate coaching, Arctic Fox ensures that the Federal Government secures the best talent, while professionals feel supported, valued, and fairly compensated.

📌 Principal Security Engineer (Canberra)
🏢 Arctic Fox
📍 Canberra