Cyber Security Engineer - Threat Detection & Response Contract Engagement with Potential Extension
An established Australian financial services organization is seeking an experienced Cyber Security Engineer - Threat Detection & Response to lead the optimization and tuning of its production Darktrace environment.
This is a hands-on delivery engagement focused on improving detection quality, reducing alert fatigue, strengthening visibility across the network estate, and ensuring the platform is delivering maximum value to the organization's cyber security program.
The successful consultant will work through a defined backlog of optimization activities while partnering closely with internal security, infrastructure and technology stakeholders.
What You'll Be Doing
- Assess the current Darktrace deployment against vendor recommendations and industry best practice
- Tune detection models and analytics to improve signal quality and reduce false positives
- Execute a backlog of Darktrace and NDR optimization initiatives
- Validate monitoring coverage across the network environment and identify visibility gaps
- Review alerting trends and recommend improvements to detection effectiveness
- Document configuration changes, tuning activities, findings and recommendations
- Develop sustainable processes and knowledge artefacts for internal teams
- Work closely with technology, security and consulting stakeholders
- Deliver technical knowledge transfer and mentoring to internal teams
- Provide regular updates on progress, risks, findings and recommendations
What We're Looking For
- Proven experience tuning and optimizing Darktrace within enterprise production environments
- Strong knowledge of Threat Detection & Response (NDR) technologies and methodologies
- Expertise in behavioral analytics, anomaly detection, machine learning-driven threat detection and alert triage
- Demonstrated success improving detection accuracy and reducing alert noise
- TCP/IP
- LAN/WAN technologies
- Routing and switching
- Network security fundamentals
- Ability to work independently within a consulting or project-based engagement
- Excellent stakeholder management, documentation and communication skills
- Experience providing practical remediation recommendations and knowledge transfer
- Microsoft environments including:
- Microsoft 365
- Sophos Endpoint
- Exposure to ISO 27001 security uplift initiatives
- SOC, MDR, incident response or security operations experience
You'll be joining an organization with:
- Darktrace deployed as the primary NDR capability
- A Microsoft-centric technology ecosystem
- Sophos endpoint and firewall technologies providing additional visibility
- Externally managed SOC, MDR and EDR services
- Engaged technical stakeholders and accessible decision-makers
- Strong executive support for implementing security improvements
Cyber Security Engineer employer: NTT DATA, Inc.
AMSA is an exceptional employer that fosters a collaborative and innovative work culture, making it an ideal place for professionals in the tech industry. With a strong focus on employee growth, AMSA offers continuous learning opportunities and the chance to work on cutting-edge projects within the Dynamics 365 and Power Platform ecosystem. Located in a vibrant area, employees enjoy a supportive environment that values their contributions and encourages meaningful engagement with multidisciplinary teams.
