Job Description

n

About us

n

We’re growing, not slowing, here at Macquarie Technology Group because we’re passionate about doing things differently. We want to challenge the industry and look for better ways of doing things. As a team, Macquarie Government are hardworking, results and success focused. We also take the time to celebrate our success and make sure our people are doing work that makes a difference.

n

We believe that collaboration & team connection is key for success. This role will be based in Canberra in office with one of our clients.

n

We require security clearance for this role you must be an Australian citizen to be eligible to obtain a security clearance or ideally already hold NV1 security clearance.

The Opportunityn

We're looking for a motivated Cyber Security Engineer to join our growing security team in Canberra. This is a hands‑on role where you'll be at the centre of our security operations, helping to detect, investigate, and respond to threats while expanding the visibility of our SIEM platform.

n

You're someone who has already gotten your hands dirty in a SOC environment and knows your way around Splunk and you're ready to take the next step in your career with a team that genuinely invests in its people.

What You'll Be Doing!n

n
- Monitoring, triaging, and responding to security alerts and incidents within our Security Operations Centre (SOC)
n
- Onboarding and integrating new log sources into Splunk, including writing and tuning data inputs, parsing configurations, and field extractions
n
- Developing and refining Splunk searches, dashboards, and alerts to improve threat detection capability
n




- Investigating security events and escalating incidents in line with established playbooks and procedures
n
- Contributing to the continuous improvement of SOC processes, runbooks, and detection logic
n
- Collaborating with internal teams to ensure log coverage across cloud, network, and endpoint environments
n
- Keeping up with the evolving threat landscape and bringing fresh ideas to the team
n

About You!n

n
- A degree in Cyber Security, Information Technology, Computer Science, or a related field
n
- Minimum 18 months of hands‑on experience in a SOC operations environment, including practical experience onboarding and validating log sources in Splunk (e.g., configuring inputs, writing props/transforms, and ensuring data quality).
n
- Solid understanding of common attack techniques, threat indicators, and the MITRE ATT&CK; framework
n
- Familiarity with security technologies such as firewalls, IDS/IPS, endpoint detection tools, and cloud security platforms
n
- Strong analytical and problem‑solving skills with a keen eye for detail
n
- Clear written and verbal communication able to explain a complex incident to both technical and non-technical stakeholders
n

Nice to Have!n

n
- Splunk certifications (e.g., Splunk Core Certified User or Power User)
n
- Exposure to SOAR platforms or security automation
n
- Experience with cloud environments (AWS, Azure, or GCP)
n
- Relevant industry certifications such as CompTIA Security+, CySA+, or equivalent
n

n

Candidates must be Australian citizens and eligible to obtain or hold an Australian Government security clearance.

n

#J-18808-Ljbffr

📌 Cyber Security Engineer (Harman)
🏢 Medium
📍 Harman