Act as the L2 escalation point for complex security incidents Engineer and optimise Microsoft-focused security platforms Full-time onsite role in Brisbane with NV1 clearance required Brennan.
Where true performance thrives.
At Brennan, we believe that how technology is delivered is every bit as important as what the technology is.
We focus on creating real and relevant value for customers with solutions that fit their specific needs and always reflect their true interests.
It's a claim backed by our True Performance System – a way of working engineered to get us closer, and deliver better, for our customers and their actual experience of technology.
Why join Brennan True performance for our customers starts with a true belief in our people.
It's why we've structured our business to help our teams, and their talents, shine bright.
It's why we've created a workplace where people of all backgrounds, beliefs and experiences are welcomed and empowered.
And it's why we've built an organisation where real innovation makes a genuine impact and generates true rewards for our team members.
True rewards In addition to competitive remuneration, Brennan offers extensive benefits, including: Training and certification bonuses Culture Awards that recognise excellence Brennan Daredevils – our annual, all-expenses paid trip awarded to our top performers and outstanding contributors Vibrant, fun social activities Discounted hardware and software An environment that embraces learning and development The role: We are looking for a Security Operations Engineer (L2) to join our Cyber Security team in Brisbane.
This is an excellent opportunity for an experienced cyber security professional looking to take the next step in their career.
Working within our Security Operations Centre (SOC), you will play a key role in protecting a range of sovereign and government-focused customers while helping to build,



maintain and improve the security platforms that support our managed security services.
This role offers a balance of operational and engineering responsibilities.
Approximately 50% of your time will be spent acting as an escalation point for Security Analysts, investigating and resolving complex security incidents and platform issues.
The remaining 50% will focus on engineering activities across our security platforms, including customer onboarding, configuration, optimisation, automation and continuous improvement.
This is a Brisbane-based role, 3 days a week in the office however if we have more NV1 work, this may be higher as needed due to the requirements.
Standard business hours apply, with participation in a secondary on-call roster as required.
Please note: Applicants must be Australian Citizens and eligible to obtain NV1 Security Clearance.
Key Responsibilities: Act as an escalation point for Security Analysts and investigate complex security incidents and platform issues Perform root cause analysis and troubleshooting across multiple security technologies Configure, administer and optimise SIEM, SOAR, endpoint, email, identity and vulnerability management platforms Onboard and transition customers onto managed security services, including log collection, agent deployment and platform configuration Build and maintain security automations, integrations and operational processes Implement and support identity, access and cloud security controls Create and maintain runbooks,



standard operating procedures and technical documentation Work closely with customers and internal teams to deliver high-quality security outcomes Support platform upgrades, tuning, testing and continuous improvement initiatives Participate in the SOC secondary on-call roster What skills and experience you bring: Australian Citizenship and eligibility to obtain NV1 Security Clearance 2-3+ years' experience in a Security Operations Centre (SOC), cyber security engineering or related security role Experience investigating and responding to security incidents Strong troubleshooting, analytical and root cause analysis skills Experience working with SIEM, SOAR, endpoint security and identity management platforms Strong communication skills with the ability to engage both technical and non-technical stakeholders Experience working within operational support, change management or managed services environments Ability to work effectively in a fast-paced team workplace A proactive approach to learning, collaboration and continuous improvement Technical skills in some of the following areas is beneficial: Microsoft Sentinel and Microsoft Defender XDR Securonix SentinelOne and CrowdStrike Mimecast and Check Point Harmony Entra ID, Conditional Access and Multi-Factor Authentication (MFA) Azure or AWS security services Tenable and vulnerability management platforms Security incident response, threat investigation and root cause analysis Security automation, SOAR and API integrations PowerShell and Python scripting Microsoft SC-200 Security Operations Analyst Associate (highly regarded) Security+, CySA+, SC-300, AZ-500 or other relevant cyber security certifications Note: As part of our hiring process, you will be required to undertake a National Criminal History Check.
Brennan is an equal-chance employer

📌 Security Operations Engineer (Queensland)
🏢 Brennan
📍 Queensland