Senior Security Operations Specialist
Posted Updated
- Rate Range: $130 - $140 per hour (plus GST / Inc. Super where applicable)
- Location: Hybrid (QLD, WA, ACT, VIC, NSW, NT, SA, TAS) — 2 days per week in-office
- Contract Term: Initial 12 months + two 12-month extension options
- Hourly Capacity: Up to 40 hours per week
- Experience Level: Senior (APS6 equivalent)
- Security Clearance: Must hold an active Negative Vetting Level 1 (NV1) clearance
We are seeking a highly skilled Senior Security Operations Specialist to provide hands-on operational capability to actively monitor, detect, and respond to cyber threats. Reporting to the Cyber Security Lead, you will play a critical role in strengthening the security posture of our cloud-hosted solutions.
This is a strongly hands-on technical engineering role rather than a coordination-focused function. You will work closely with the Technology Development team to maintain the integrity and confidentiality of our data and information systems across both the planning/design phases and active operations.
Key Duties and Responsibilities
- Security Monitoring & Detection Engineering: Configure, manage, and optimise security monitoring platforms. Take ownership of developing and tuning analytics rules, dashboards, and alerting systems.
- Incident Response & Investigation: Leverage advanced security tools to investigate alerts, respond to cyber incidents, and continuously improve threat prevention capabilities.
- Collaboration: Partner with the Technology Development team to embed robust security monitoring into cloud-hosted platforms.
- Use Case Development: Design, test, and deploy functional detection use cases to stay ahead of an evolving threat landscape.
- Hands-on cyber security operations, including security monitoring, incident response, threat analysis, and investigation in enterprise or cloud environments.
- Working with SIEM/SOAR platforms, preferably Microsoft Sentinel, including development of analytics rules, KQL queries, alert tuning, and dashboards.
- Incident detection and response, including triaging alerts, investigating security events, and performing root cause analysis.
- Security automation and scripting, using tools to support orchestration and response activities.
- Working in cloud environments (preferably Microsoft Azure), with a strong understanding of logging, monitoring, and security controls.
- Applying cyber security frameworks and best practices, including familiarity with Whole-of-Australian-Government (WoAG) policies such as the ISM and Essential Eight.