Security Engineer | Microsoft Security & SIEM

Contract Opportunity | NV1 eligibility, existing baseline clearance - ACT or NSW or VIC

Are you an experienced Security Engineer looking to make a meaningful impact while working at the forefront of cybersecurity?

Our client is seeking a highly capable Security Engineer to join their IT Security team and play a key role in strengthening security operations, improving cyber resilience, and driving security uplift initiatives across a mission-critical environment.

This is a hands-on role where you'll have the opportunity to shape security strategy while actively implementing and managing security technologies, processes, and automation.

You'll work closely with stakeholders across technology, business teams, and government partners to deliver robust security outcomes.

About the Organisation

Our client is a nationally significant organisation dedicated to creating safer online experiences for Australians.

Working alongside government agencies, industry leaders, and community partners, they help address emerging cyber threats and digital harms while supporting a safer digital future.

This is an opportunity to join a purpose-driven organisation where your expertise will contribute to protecting Australians in an increasingly complex cyber landscape.

What You'll Be Doing

- Configure, maintain and troubleshoot log source integrations into Microsoft Sentinel
- Develop security monitoring use cases, alerting rules, and threat response playbooks
- Create and optimise KQL queries for investigations, threat hunting, and traffic analysis
- Administer and maintain cybersecurity technologies including: SIEM/SOAR platforms,



Web Application Firewalls (WAF), Data Loss Prevention (DLP), Vulnerability Management solutions, Proxy technologies, Application Whitelisting technologies
- Integrate current security data sources and automate response workflows
- Support cyber incident detection, triage and response activities
- Ensure alignment with Australian Government security frameworks,
- Partner with business stakeholders and project teams on cyber uplift initiatives
- Minimum 5 years' experience working across the Microsoft security ecosystem
- Strong experience with Microsoft Sentinel, Microsoft Intune, Entra ID (Azure Active Directory), Microsoft Purview, Microsoft 365 Security technologies
- Proven experience operating, maintaining and automating SIEM platforms
- Solid knowledge of security operations, detection engineering, and incident response
- Experience delivering cyber security uplift initiatives and engaging business stakeholders
- Practical experience implementing and managing controls
- Relevant cybersecurity certifications

Highly Regarded

- Experience with Microsoft Sentinel, Splunk, Rapid7, Airlock or similar technologies
- Exposure to Zscaler
- Incident response and threat hunting experience
- Broader experience across Security Operations (SecOps) and Governance, Risk & Compliance (GRC)

Security Clearance Requirements

To be considered, applicants must be Australian Citizens and be eligible to obtain a Negative Vetting 1 (NV1) Security Clearance. Therefore you will be expected to have existing Baseline at a minimum

This is an initial 12 months contract - some travel to Canberra will be required

#J-18808-Ljbffr

📌 Cyber Security Engineer - Microsoft ecosystem (Melbourne)
🏢 Balance Recruitment and Balance Consulting
📍 Melbourne