Principal Security Engineer Cyber Advisor

Principal Security Engineer Cyber Advisor, Canberra

One of our Federal Government clients is looking for a Principal Security Engineer Cyber Advisor.

We are looking for the following skills/experience:

• Demonstrated hands on experience as a tech lead implementing and administering enterprise SIEM platforms such as Microsoft Sentinel/Windows Defender, IBM Qradar, Elastic or Splunk.
• Strong experience in automation, writing complex queries, correlation rules, parsers and developing SOC playbooks.
• Proven ability to optimise and integrate SIEM platforms, reduce false positives and improve alert quality.
• Build and maintain SOAR workflows to automate alert triage, enrichment, containment, and response.
• Integrate SIEM and SOAR platforms with security and IT tooling including EDR, IAM, ticketing, email, firewall, and threat intelligence systems.

Note - We are an equal employment opportunity provider and encourage applications from people with disability. Please let us know if you need special assistance for this job application.