Join a growing cyber security team focused on strengthening Security Operations, Detection Engineering and Incident Response capabilities across complex enterprise environments. Advanced Linux experience is required for this role.

Key Responsibilities

- Develop and tune detections, correlation rules and security use cases across SIEM, SOAR and EDR platforms.
- Lead incident investigations, threat hunting activities and security response efforts.
- Build and maintain security playbooks, runbooks and automated response workflows.
- Automate SOC processes using scripting and SOAR technologies to improve efficiency and reduce manual effort.
- Optimise security tooling, reduce false positives and improve overall security visibility.
- Conduct security readiness assessments, tabletop exercises and capability uplift initiatives.
- Stay across emerging threats, vulnerabilities and threat actor activity to continuously improve security controls.
- Secure and monitor Linux-based environments, ensuring strong visibility, detection coverage and incident response capability across critical infrastructure.

Skills & Experience

- 5+ years' experience in SOC, Detection Engineering,



Threat Hunting or Incident Response roles.
- Strong experience with SIEM and SOAR platforms such as Splunk, Sentinel, XSOAR, Google SecOps, QRadar, XSIAM or similar.
- Experience with security automation (python, bash, Golang, shell etc)
- Advanced Linux administration and security experience, including log analysis, system hardening, troubleshooting, monitoring and incident response across enterprise Linux environments.
- Strong knowledge of Incident Response, Detection Engineering and Threat Hunting.
- Scripting experience with Python, Bash, PowerShell or similar.
- Understanding of MITRE ATT&CK;, threat intelligence and contemporary attacker techniques.
- Experience tuning security tools and improving SOC effectiveness.

Nice to Have

- Experience with CrowdStrike, SentinelOne, Defender or similar EDR platforms.
- Vulnerability Management experience.
- Experience securing cloud and containerised environments.
- Exposure to AI-driven security operations and automation.
- Relevant security certifications.

📌 Senior Security Operations Engineer (Sydney)
🏢 Nameless
📍 Sydney