At a Glance
- Tasks: Administer and enhance enterprise cyber security platforms while collaborating with top security professionals.
- Company: Join a leading tech firm focused on innovative cyber security solutions.
- Benefits: Competitive salary, flexible work options, and opportunities for professional growth.
- Other info: Gain broad exposure to various security technologies and advance your career.
- Why this job: Dive into the exciting world of cyber security and make a real difference.
- Qualifications: Experience with Microsoft Sentinel or similar SIEM, plus strong troubleshooting skills.
The predicted salary is between 54000 - 66000 $ per year.
We are seeking a Cyber Security Engineer to join an established Cyber Security Operations team supporting a large, complex enterprise technology environment. This is a hands-on engineering role focused on the administration, maintenance, monitoring and continuous improvement of enterprise cyber security platforms.
You will work closely with senior security professionals across Microsoft Sentinel, SIEM, detection, security monitoring, cloud security, endpoint protection, identity, vulnerability management and automation/SOAR. The role would suit either an established Cyber Security Engineer or a technically strong SOC/Security Analyst looking to move deeper into security engineering.
What You'll Be Doing
- Administer, configure and maintain enterprise cyber security platforms.
- Support Microsoft Sentinel, including analytics rules, workbooks, data connectors, watchlists, automation rules and incident configuration.
- Onboard and maintain security logs for detection, investigation, reporting and compliance.
- Review false positives and contribute to alert and detection tuning.
- Perform tooling health checks covering data ingestion, connectors, alerting, access and platform availability.
- Troubleshoot configuration, integration, telemetry and performance issues.
- Support endpoint detection, vulnerability management, cloud security, email security, identity protection and data protection platforms.
- Maintain integrations, service accounts, access controls and security platform configurations.
- Develop, test and maintain SOAR and security automation workflows supporting investigation, enrichment, containment and response.
- Support cyber incidents by ensuring appropriate logs, alerts, dashboards and investigation tools are available.
- Work with internal technology teams and vendors to resolve security tooling issues.
- Maintain clear technical documentation, procedures and configuration records.
Ideally you will bring:
- Experience administering or supporting Microsoft Sentinel or another enterprise SIEM.
- Exposure to Microsoft/Azure security technologies.
- Experience across one or more of: Endpoint security / EDR, Identity security, Cloud security, Vulnerability management, Email security, Data protection.
- Experience troubleshooting security tooling, integrations or telemetry.
- Exposure to alert tuning, detection engineering or log management.
- An understanding of security automation or SOAR.
- Aware of frameworks including NIST CSF, ASD Essential Eight, ISO 27001/2 or CIS Controls.
- Strong technical documentation and communication skills.
You'll gain broad exposure across enterprise security technologies rather than being restricted to one narrow area. You'll work alongside experienced cyber security professionals while developing deeper capability across: SIEM, Detection, Security Tooling, Cloud, Automation, Incident Response.
Cyber Security Engineer employer: Slade Group
Members Health Fund Alliance is an exceptional employer that fosters a collaborative and innovative work culture, where your contributions directly impact health advocacy in the not-for-profit sector. With a focus on employee growth, we offer opportunities for professional development and leadership within a supportive team environment, all while working remotely from the vibrant Surrey Hills area, known for its community spirit and accessibility to Melbourne's resources.