Job Description
We are seeking a Cyber Security Engineer to join an established Cyber Security Operations team supporting a large, complex enterprise technology environment.
n
This is a hands-on engineering role focused on the administration, maintenance, monitoring and continuous improvement of enterprise cyber security platforms.
n
You will work closely with senior security professionals across Microsoft Sentinel, SIEM, detection, security monitoring, cloud security, endpoint protection, identity, vulnerability management and automation/SOAR. The role would suit either an established Cyber Security Engineer or a technically strong SOC/Security Analyst looking to move deeper into security engineering.
n
What You'll Be Doing
n
n
Administer, configure and maintain enterprise cyber security platforms.
n
Support Microsoft Sentinel, including analytics rules, workbooks, data connectors, watchlists, automation rules and incident configuration.
n
Onboard and maintain security logs for detection, investigation, reporting and compliance.
n
Review false positives and contribute to alert and detection tuning.
n
Perform tooling health checks covering data ingestion, connectors, alerting, access and platform availability.
n
Troubleshoot configuration, integration, telemetry and performance issues.
n
Support endpoint detection, vulnerability management, cloud security, email security, identity protection and data protection platforms.
n
Maintain integrations, service accounts, access controls and security platform configurations.




n
Develop, test and maintain SOAR and security automation workflows supporting investigation, enrichment, containment and response.
n
Support cyber incidents by ensuring appropriate logs, alerts, dashboards and investigation tools are available.
n
Work with internal technology teams and vendors to resolve security tooling issues.
n
Maintain clear technical documentation, procedures and configuration records.
n
n
Ideally you will bring:
n
n
Experience administering or supporting Microsoft Sentinel or another enterprise SIEM.
n
Exposure to Microsoft/Azure security technologies.
n
n
Experience across one or more of:
n
n
Endpoint security / EDR
n
Identity security
n
Cloud security
n
Vulnerability management
n
Email security
n
Data protection
n
Experience troubleshooting security tooling, integrations or telemetry.
n
Exposure to alert tuning, detection engineering or log management.
n
An understanding of security automation or SOAR.
n
Awareness of frameworks including NIST CSF, ASD Essential Eight, ISO ******* or CIS Controls.
n
Robust technical documentation and communication skills.
n
n
You'll gain broad exposure across enterprise security technologies rather than being restricted to one narrow area. You'll work alongside experienced cyber security professionals while developing deeper capability across: SIEM > Detection > Security Tooling > Cloud > Automation > Incident Response
#J-*****-Ljbffr

📌 Cyber Security Engineer (Victoria)
🏢 Slade Group
📍 Victoria