Start searching
Back to Jobs
Recently postedFull timeTechnology

Senior Security Operations Engineer

confidentialSydney, Sydney🇦🇺Australia

Quick overview

SeniorityMid Senior
Employment typeFull Time
Work modeHybrid
LocationSydney, Sydney, Australia
ShellSplunkBashGoPowerShellPythonLinux

Job description

Join a growing cyber security team focused on strengthening Security Operations, Detection Engineering and Incident Response capabilities across complex enterprise environments. Advanced Linux experience is required for this role.

Key Responsibilities
  • Develop and tune detections, correlation rules and security use cases across SIEM, SOAR and EDR platforms.
  • Lead incident investigations, threat hunting activities and security response efforts.
  • Build and maintain security playbooks, runbooks and automated response workflows.
  • Automate SOC processes using scripting and SOAR technologies to improve efficiency and reduce manual effort.
  • Optimise security tooling, reduce false positives and improve overall security visibility.
  • Conduct security readiness assessments, tabletop exercises and capability uplift initiatives.
  • Stay across emerging threats, vulnerabilities and threat actor activity to continuously improve security controls.
  • Secure and monitor Linux-based environments, ensuring strong visibility, detection coverage and incident response capability across critical infrastructure.
Skills & Experience
  • 5+ years' experience in SOC, Detection Engineering, Threat Hunting or Incident Response roles.
  • Strong experience with SIEM and SOAR platforms such as Splunk, Sentinel, XSOAR, Google SecOps, QRadar, XSIAM or similar.
  • Experience with security automation (python, bash, Golang, shell etc)
  • Advanced Linux administration and security experience, including log analysis, system hardening, troubleshooting, monitoring and incident response across enterprise Linux environments.
  • Strong knowledge of Incident Response, Detection Engineering and Threat Hunting.
  • Scripting experience with Python, Bash, PowerShell or similar.
  • Understanding of MITRE ATT&CK, threat intelligence and modern attacker techniques.
  • Experience tuning security tools and improving SOC effectiveness.
Nice to Have
  • Experience with CrowdStrike, SentinelOne, Defender or similar EDR platforms.
  • Vulnerability Management experience.
  • Experience securing cloud and containerised environments.
  • Exposure to AI-driven security operations and automation.
  • Relevant security certifications.

Similar jobs

Apply