We're working with a large Australian organisation investing in improving its cybersecurity capabilities.
This is a hands‑on role focused on establishing new SOC and SIEM capabilities, improving endpoint security and strengthening the organisation's overall security posture.
The organisation is building these capabilities from the ground up, so we're looking for an experienced Cyber Security Engineer who has been involved in implementing security technologies, not just supporting existing environments.
What you'll be doing
- SOC Implementation: Support the establishment of a Security Operations Centre (SOC), working with external security providers to develop monitoring and incident response capabilities.
- SIEM Implementation: Contribute to the design, selection, implementation and configuration of a cloud-based SIEM solution, including log ingestion, event monitoring and security data analysis.
- Endpoint Security: Assess existing endpoint protection capabilities and support the selection, implementation and configuration of enterprise‑grade endpoint security solutions.
- Security Technology Evaluation: Evaluate security technologies
- Threat & Vulnerability Management: Identify security threats and vulnerabilities and recommend appropriate preventative controls to strengthen the organisation's security posture.
- Security Awareness: Support security education initiatives,
including phishing awareness campaigns and improving employees' understanding of cyber threats.
- Ongoing Security Operations: Support the ongoing management, monitoring and improvement of security technologies following implementation.
What we're looking for
- Strong hands‑on experience in cybersecurity engineering, particularly implementing and configuring security solutions.
- Experience designing, implementing or establishing SIEM capabilities using technologies such as Microsoft Sentinel or Splunk.
- Experience working with SOC environments, including security monitoring, alerting and incident management.
- Strong knowledge of endpoint security technologies such as Microsoft Defender or CrowdStrike.
- Experience evaluating security products and contributing to technology selection and implementation.
- Good understanding of cyber threats, vulnerabilities, security controls and incident response.
- Experience working with external security vendors and service providers.
- Ability to work across both project implementation and ongoing security operations.
Why consider this role?
You'll have the prospect to help establish security capabilities that don't currently exist within the organisation, rather than simply maintaining an established environment.
The role offers hands‑on involvement in technology selection, implementation and ongoing security operations, with the opportunity to influence how the organisation develops its cybersecurity capabilities.