Cyber Security Engineer

Australia·CanberraMaximum-Term Contractmid

OtherCyber Security Engineer

1 views0 saves0 applied

Apply Now

Quick Summary

Overview

About us We’re growing, not slowing, here at Macquarie Technology Group because we’re passionate about doing things differently.

Technical Tools

OtherCyber Security Engineer

About us

We’re growing, not slowing, here at Macquarie Technology Group because we’re passionate about doing things differently. We want to challenge the industry and look for better ways of doing things. As a team, Macquarie Government are hardworking, results and success focused. We also take the time to celebrate our success and make sure our people are doing work that makes a difference.

We believe that collaboration & team connection is key for success. This role will be based in Canberra on-site with one of our clients.

We require security clearance for this role you must be an Australian citizen to be eligible to obtain a security clearance or ideally already hold NV1 security clearance.

We're looking for a motivated Cyber Security Engineer to join our growing security team in Canberra. This is a hands-on role where you'll be at the centre of our security operations, helping to detect, investigate, and respond to threats while expanding the visibility of our SIEM platform.

You're someone who has already gotten your hands dirty in a SOC environment and knows your way around Splunk and you're ready to take the next step in your career with a team that genuinely invests in its people.

Monitoring, triaging, and responding to security alerts and incidents within our Security Operations Centre (SOC)
Onboarding and integrating new log sources into Splunk, including writing and tuning data inputs, parsing configurations, and field extractions
Developing and refining Splunk searches, dashboards, and alerts to improve threat detection capability
Investigating security events and escalating incidents in line with established playbooks and procedures
Contributing to the continuous improvement of SOC processes, runbooks, and detection logic
Collaborating with internal teams to ensure log coverage across cloud, network, and endpoint environments
Keeping up with the evolving threat landscape and bringing fresh ideas to the team

A degree in Cyber Security, Information Technology, Computer Science, or a related field
Minimum 18 months of hands-on experience in a SOC operations environment, including practical experience onboarding and validating log sources in Splunk (e.g., configuring inputs, writing props/transforms, and ensuring data quality).
Solid understanding of common attack techniques, threat indicators, and the MITRE ATT&CK framework
Familiarity with security technologies such as firewalls, IDS/IPS, endpoint detection tools, and cloud security platforms
Strong analytical and problem-solving skills with a keen eye for detail
Clear written and verbal communication able to explain a complex incident to both technical and non-technical stakeholders

Splunk certifications (e.g., Splunk Core Certified User or Power User)
Exposure to SOAR platforms or security automation
Experience with cloud environments (AWS, Azure, or GCP)
Relevant industry certifications such as CompTIA Security+, CySA+, or equivalent

Candidates must be Australian citizens and eligible to obtain or hold an Australian Government security clearance.

If this role excites you Apply Now!