Do you enjoy turning a messy pile of logs into something an analyst can actually use? Want to work on the SIEM platforms behind detection and response for a wide range of customers? This role might be for you.

We’re looking for curious, hands-on people who genuinely enjoy this stuff to join our Infrastructure team, supporting our security services across all manner of customers, from Government to small, medium and large private industry. Whether you’re early in your career or you’ve been running SIEMs for years, we’d like to hear from you.

This is not a contract role in some BS agency doing some BS stuff. You’ll be joining our internal team, doing non-BS stuff.

What you’ll be doing

You’ll join a small, skilled team that maintains the back-end infrastructure behind our security services. Our platforms are managed as code through automation and Git workflows, and you’ll have a real say in how security data is collected, stored, searched and surfaced. The work includes:

- Deploying, tuning and maintaining SIEM and log analytics platforms.

- Onboarding current log sources and building the ingest pipelines and parsers to get that data normalised and useful.

- Managing data lifecycle, retention, storage and performance, keeping an eye on cost as well as speed.

- Building dashboards, detections and alerting with our detection and response teams.

- Securing the platforms and underlying infrastructure in line with the ASD ISM.

- Automating where it makes sense.

- Working with other technical teams on complex data and infrastructure problems.

- Sharing knowledge with the rest of the team.

There’s room to take on as much as you want here.



Some people will focus on getting deep into pipelines and parsing, others will end up shaping platform architecture, leading migrations or mentoring the rest of the team. We’ll work that out with you.

What we’re looking for

The must-haves

- A genuine interest in security and infrastructure, and the curiosity to keep digging into a problem until you understand why it’s happening.

- Australian citizenship.

- Baseline clearance, or eligibility and willingness to get one. We can sponsor the right person.

Things that will help

Nobody ticks every box. If you’ve got some of this and want to learn the rest, apply.

- Experience with a SIEM or log analytics platform, such as Elastic, Splunk, Microsoft Sentinel, QRadar or Google SecOps. Work, study and homelab experience all count, and we care more about how well you understand SIEM than which logo was on it.

- Building or troubleshooting ingest pipelines and parsing log formats (syslog, JSON, Windows events, cloud audit logs and the odd proprietary vendor format).

- Linux administration and hardening.

- Git workflows and automation tooling such as Ansible or Terraform.

- Networking fundamentals.

- Data pipeline tooling such as Logstash, Cribl, Kafka, Fluent Bit or Vector.

- Capacity planning, sizing and performance tuning.





- Data modelling and schema standards (e.g. ECS, OCSF, ASIM, CIM).

- Docker and Kubernetes.

- Cloud platforms and automation (AWS, Azure, GCP).

- Scripting in Python, Bash or PowerShell.

- Broader security engineering, such as system hardening, vulnerability management or incident response.

- Government security frameworks such as the ISM, Essential Eight or IRAP.

- Relevant certifications (e.g. Elastic Certified Engineer, Splunk Certified Admin, Microsoft SC-200).

- NV1 clearance or above.

Bonus points (definitely not required)

Run a homelab? Play CTFs? Built a SIEM for your home network just to see if you could? Tell us about it. We like people who do this because they enjoy it, and we’d love to hear what you tinker with.

Not sure if you’re the right fit?

Apply anyway. Tell us what you’ve worked on and what you’re keen to learn, and we’ll take it from there.

What do we offer?

Working from home? You bet. We don’t mind where you work. Our hybrid culture supports the way you want to work.
Fair pay? No doubt. We’re sure you’re worth it.
Training? Obviously. We want our people to be the best, and staying that way takes investment. Simple.

You’ll also get real ownership of the work you do, and support to grow as far as you want to take it.

A bit about us

Cleared has provided bespoke cyber advice and services since 2019, helping customers mature their cyber capability and respond to and handle threats. We provide ethical, cost-effective solutions to our customers’ problems, and our unique business culture is a big part of our success.

https://cleared.io/careers

📌 Security Engineer (Canberra)
🏢 Cleared
📍 Canberra