Job Description

We are seeking a Cyber Security Engineer to join an established Cyber Security Operations team supporting a large, complex enterprise technology workplace.

n

This is a hands-on engineering role focused on the administration, maintenance, monitoring and continuous improvement of enterprise cyber security platforms.

n

You will work closely with senior security professionals across Microsoft Sentinel, SIEM, detection, security monitoring, cloud security, endpoint protection, identity, vulnerability management and automation/SOAR. The role would suit either an established Cyber Security Engineer or a technically strong SOC/Security Analyst looking to move deeper into security engineering.

n

What You'll Be Doing

n

n
- Administer, configure and maintain enterprise cyber security platforms.
n
- Support Microsoft Sentinel, including analytics rules, workbooks, data connectors, watchlists, automation rules and incident configuration.
n
- Onboard and maintain security logs for detection, investigation, reporting and compliance.
n
- Review false positives and contribute to alert and detection tuning.
n
- Perform tooling health checks covering data ingestion, connectors, alerting, access and platform availability.
n
- Troubleshoot configuration, integration, telemetry and performance issues.
n
- Support endpoint detection, vulnerability management, cloud security, email security, identity protection and data protection platforms.
n
- Maintain integrations, service accounts, access controls and security platform configurations.




n
- Develop, test and maintain SOAR and security automation workflows supporting investigation, enrichment, containment and response.
n
- Support cyber incidents by ensuring appropriate logs, alerts, dashboards and investigation tools are available.
n
- Work with internal technology teams and vendors to resolve security tooling issues.
n
- Maintain clear technical documentation, procedures and configuration records.
n

n

Ideally you will bring:

n

n
- Experience administering or supporting Microsoft Sentinel or another enterprise SIEM.
n
- Exposure to Microsoft/Azure security technologies.
n

n

Experience across one or more of:

n

n
- Endpoint security / EDR
n
- Identity security
n
- Cloud security
n
- Vulnerability management
n
- Email security
n
- Data protection
n
- Experience troubleshooting security tooling, integrations or telemetry.
n
- Exposure to alert tuning, detection engineering or log management.
n
- An understanding of security automation or SOAR.
n
- Awareness of frameworks including NIST CSF, ASD Essential Eight, ISO 27001/2 or CIS Controls.
n
- Strong technical documentation and communication skills.
n

n

You'll gain broad exposure across enterprise security technologies rather than being restricted to one narrow area. You'll work alongside experienced cyber security professionals while developing deeper capability across: SIEM > Detection > Security Tooling > Cloud > Automation > Incident Response

n

#J-18808-Ljbffr

📌 Cyber Security Engineer (Victoria)
🏢 Slade Group
📍 Victoria