- Rate Range: $130 - $140 per hour (plus GST / Inc. Super where applicable)
- Location: Hybrid (QLD, WA, ACT, VIC, NSW, NT, SA, TAS) — 2 days per week in-office
- Contract Term: Initial 12 months + two 12-month extension options
- Hourly Capacity: Up to 40 hours per week
- Experience Level: Senior (APS6 equivalent)
- Security Clearance: Must hold an active Negative Vetting Level 1 (NV1) clearance

About the Role
We are seeking a highly skilled Senior Security Operations Specialist to provide hands-on operational capability to actively monitor, detect, and respond to cyber threats. Reporting to the Cyber Security Lead, you will play a critical role in strengthening the security posture of our cloud-hosted solutions.
This is a strongly hands-on technical engineering role rather than a coordination-focused function. You will work closely with the Technology Development team to maintain the integrity and confidentiality of our data and information systems across both the planning/design phases and active operations.

Key Duties and Responsibilities

- Security Monitoring & Detection Engineering: Configure, manage, and optimise security monitoring platforms. Take ownership of developing and tuning analytics rules, dashboards, and alerting systems.
- Incident Response & Investigation: Leverage advanced security tools to investigate alerts,



respond to cyber incidents, and continuously improve threat prevention capabilities.
- Collaboration: Partner with the Technology Development team to embed robust security monitoring into cloud-hosted platforms.
- Use Case Development: Design, test, and deploy functional detection use cases to stay ahead of an evolving threat landscape.

Requirements

1. Hands-on cyber security operations, including security monitoring, incident response, threat analysis, and investigation in enterprise or cloud environments.
2. Working with SIEM/SOAR platforms, preferably Microsoft Sentinel, including development of analytics rules, KQL queries, alert tuning, and dashboards.
3. Incident detection and response, including triaging alerts, investigating security events, and performing root cause analysis.
4. Security automation and scripting, using tools to support orchestration and response activities.
5. Working in cloud environments (preferably Microsoft Azure), with a robust understanding of logging, monitoring, and security controls.
6. Applying cyber security frameworks and best practices, including familiarity with Whole-of-Australian-Government (WoAG) policies such as the ISM and Essential Eight.

[email protected]

📌 Senior Security Operations Specialist (Sydney)
🏢 Halcyon Knights
📍 Sydney