Join a growing cyber security program focused on improving enterprise logging, monitoring and detection capabilities. We're looking for a hands-on Security Logging Engineer with solid Microsoft Sentinel and Azure experience to help deliver scalable logging solutions and work closely with platform teams and SOC stakeholders.
Key Responsibilities
- Design and implement logging solutions using Microsoft Sentinel and Azure Log Analytics
- Configure data collection rules, workspaces and destination tables
- Integrate log sources through Azure Monitor Agent, Azure Arc, Windows Event Forwarding, Syslog and CEF
- Support Windows, Linux and network device log onboarding
- Define clear, testable requirements and acceptance criteria
- Collaborate with delivery teams, platform owners and security operations teams
You'll bring:
- Hands-on Microsoft Sentinel and Log Analytics experience
- Experience with Windows and Linux logging
- Exposure to network and firewall logging (Cisco, Palo Alto, F5 or similar)
- Ability to translate technical requirements into practical outcomes
Nice to Have
- ASIM normalisation and parser development
- Azure Policy, Defender for Cloud and diagnostic settings
- OT/ICS or critical infrastructure environments
- Knowledge of Essential Eight, SOCI Act, IEC 62443 or related security frameworks
- Jira and Confluence experience
Candidates will need to be willing to undergo pre-employment screening checks, which may include ID and work rights verification, security clearance verification, and any other client-requested checks.