Cyber Security Engineer

About us

We’re growing, not slowing, here at Macquarie Technology Group because we’re passionate about doing things differently. We want to challenge the industry and look for better ways of doing things. As a team, Macquarie Government are hardworking, results and success focused. We also take the time to celebrate our success and make sure our people are doing work that makes a difference.

We believe that collaboration & team connection is key for success. This role will be based in Canberra on-site with one of our clients.

We require security clearance for this role you must be an Australian citizen to be eligible to obtain a security clearance or ideally already hold NV1 security clearance.

The Opportunity.

We're looking for a motivated Cyber Security Engineer to join our growing security team in Canberra. This is a hands-on role where you'll be at the centre of our security operations, helping to detect, investigate, and respond to threats while expanding the visibility of our SIEM platform.

You're someone who has already gotten your hands dirty in a SOC environment and knows your way around Splunk and you're ready to take the next step in your career with a team that genuinely invests in its people.

What You'll Be Doing.

• Monitoring, triaging, and responding to security alerts and incidents within our Security Operations Centre (SOC)

• Onboarding and integrating new log sources into Splunk, including writing and tuning data inputs, parsing configurations, and field extractions

• Developing and refining Splunk searches, dashboards, and alerts to improve threat detection capability

• Investigating security events and escalating incidents in line with established playbooks and procedures

• Contributing to the continuous improvement of SOC processes, runbooks, and detection logic

• Collaborating with internal teams to ensure log coverage across cloud, network, and endpoint environments

• Keeping up with the evolving threat landscape and bringing fresh ideas to the team

Nice to Have.

• Splunk certifications (e.g., Splunk Core Certified User or Power User)

• Exposure to SOAR platforms or security automation

• Experience with cloud environments (AWS, Azure, or GCP)

• Relevant industry certifications such as CompTIA Security+, CySA+, or equivalent