Cyber Security Operations Specialist
Posted Updated 3
views
Summary
Hands-on cyber security operations role with a Federal Government client (placed via recruiter Triniti): monitoring and investigating threats in cloud environments using Microsoft Sentinel and Defender, tuning KQL detections, threat hunting, incident response, and building security automation. Mandatory Australian citizenship with NV1 clearance; hybrid, base in any Australian capital city.
Salary: attractive hourly rate
triniti is seeking an experienced Cyber Security Operations Specialist, with an existing NV1 security clearance, to join a Federal Government client.This is a strong hands-on technical role focused on strengthening cyber security operations, threat detection and incident response capabilities across cloud-hosted environments.
Working closely with cyber security, development and DevOps teams, you will leverage technologies including Microsoft Sentinel and Defender to monitor and investigate security threats, develop and optimise detection capabilities, respond to incidents and implement improvements to the organisation's overall security posture.
The role offers an opportunity to contribute to both the development and ongoing operation of security capabilities, with a particular emphasis on detection engineering, threat hunting, security automation and continuous improvement.
Please note: While this position is advertised in Melbourne, candidates can be based in any Australian capital city. Hybrid working arrangements apply, with attendance at the relevant office required one to two days per week.
Key Responsibilities:
- Configure, manage and optimise security monitoring platforms, particularly Microsoft Sentinel and Defender.
- Develop and tune detection rules, KQL queries, dashboards and alerting capabilities.
- Conduct proactive threat hunting, security investigations and incident response activities.
- Investigate security incidents, perform root cause analysis and implement remediation measures.
- Develop security automation, scripts and response playbooks to improve operational efficiency.
- Support vulnerability management and the implementation of security controls across cloud environments.
- Collaborate with technical teams to improve security monitoring, detection coverage and overall cyber resilience.
- Australian Citizen with existing NV1 clearance is mandatory.
- Previous experience within Federal Government environments would be advantageous.
- Strong hands-on experience in cyber security operations, including security monitoring, threat detection, incident response and investigation.
- Demonstrated experience with SIEM/SOAR technologies, ideally Microsoft Sentinel.
- Strong knowledge of KQL, detection engineering, analytics rules and alert optimisation.
- Experience with Microsoft Defender and security monitoring across enterprise or cloud environments.
- Experience developing security automation, scripts and response playbooks.
- Sound understanding of cloud security, ideally within Microsoft Azure environments.
- Familiarity with cyber security frameworks and best practices, including the ISM and Essential Eight.
If you have specific relevant experience and existing NV1 clearance, please apply with an up-to-date CV outlining your relevant experience.
The role closes for submission on Friday 30th October.
Feel free to also reach out to one of our team (Steve Wall, Fed Gov Practice Director) for a confidential discussion.
As a 100% Australian-owned and locally based IT recruitment firm, Triniti has a dedicated Federal Government practice offering responsive delivery, competitive pricing and a deeply experienced team that understands Commonwealth environments.