triniti is seeking an experienced Cyber Security Operations Specialist, with an existing NV1 security clearance, to join a Federal Government client.

This is a robust hands-on technical role focused on strengthening cyber security operations, threat detection and incident response capabilities across cloud-hosted environments.

Working closely with cyber security, development and DevOps teams, you will leverage technologies including Microsoft Sentinel and Defender to monitor and investigate security threats, develop and optimise detection capabilities, respond to incidents and implement improvements to the organisation's overall security posture.

The role offers an opportunity to contribute to both the development and ongoing operation of security capabilities, with a particular emphasis on detection engineering, threat hunting, security automation and continuous improvement.

Please note: While this position is advertised in Melbourne, candidates can be based in any Australian capital city. Hybrid working arrangements apply, with attendance at the relevant office required one to two days per week.

Key Responsibilities

- Configure, manage and optimise security monitoring platforms, particularly Microsoft Sentinel and Defender.
- Develop and tune detection rules, KQL queries, dashboards and alerting capabilities.
- Conduct proactive threat hunting, security investigations and incident response activities.
- Investigate security incidents, perform root cause analysis and implement remediation measures.
- Develop security automation,



scripts and response playbooks to improve operational efficiency.
- Support vulnerability management and the implementation of security controls across cloud environments.
- Collaborate with technical teams to improve security monitoring, detection coverage and overall cyber resilience.

Skills & Experience Required

- Australian Citizen with existing NV1 clearance is mandatory.
- Previous experience within Federal Government environments would be advantageous.
- Strong hands-on experience in cyber security operations, including security monitoring, threat detection, incident response and investigation.
- Demonstrated experience with SIEM/SOAR technologies, ideally Microsoft Sentinel.
- Strong knowledge of KQL, detection engineering, analytics rules and alert optimisation.
- Experience with Microsoft Defender and security monitoring across enterprise or cloud environments.
- Experience developing security automation, scripts and response playbooks.
- Sound understanding of cloud security, ideally within Microsoft Azure environments.
- Familiarity with cyber security frameworks and best practices, including the ISM and Essential Eight.

As a 100% Australian-owned and locally based IT recruitment firm, Triniti has a dedicated Federal Government practice offering responsive delivery, competitive pricing and a deeply experienced team that understands Commonwealth environments.

What next

The role closes for submission on Friday 30th October.

📌 Cyber Security Operations Specialist (Melbourne)
🏢 Triniti
📍 Melbourne