Cyber Operations Security Expert

Recruitment Hive; Canberra; Hybrid; AUD 120,000 - 180,000; Full time

Job summary

Recruitment Hive presents a Federal Government cyber operations role based in Canberra. The expert leads proactive monitoring, investigations, and mitigation across the Sentinel, Defender 365 stack, Azure Security Centre, and Splunk to defend critical government systems.

You will handle high-severity incidents, act as SME in cloud security and threat mitigation, and develop phishing simulations, with NV1 security clearance and hybrid WFH options.

Qualifications

• Direct experience leading high severity cyber investigations, threat hunting, and crisis management.
• Deep, multi-domain technology experience encompassing cloud environments (AWS, Azure), Zero Trust Network Architecture (ZTNA), and DevSecOps.
• Experience with NIST, ISO 27001, or the Australian ASD Essential Eight, and implementing and using Incident Response Frameworks (NIST SP 800-61 Incident Handling Guide, Mitre Frameworks).

Responsibilities

• Lead incident response activities including initial and detailed investigation, computer forensics, chain of custody implications
• Be a point of escalation for complex incidents and act as a subject matter expert in areas of cloud security, active defence, and threat mitigation
• Develop and manage phishing simulations

Skills

Incident response leadership

Crisis management

Threat hunting

Cloud security

Active defence

Phishing simulations

Tools

Sentinel

Microsoft Defender 365

Azure Security Centre

Splunk

Job description

Our client, a Federal Government entity is seeking a Cyber Operations Security Expert.

About the role - Cyber Operations Security Expert

Lead proactive monitoring, investigation, and mitigation of security incidents within security tools (including Sentinel, Microsoft Defender 365 stack, Azure Security Centre, Splunk)

Duties - Cyber Operations Security Expert

• Lead incident response activities including initial and detailed investigation, computer forensics, chain of custody implications
• Be a point of escalation for complex incidents and act as a subject matter expert in areas of cloud security, active defence, and threat mitigation
• Develop and manage phishing simulations

Skills / Experience - Cyber Operations Security Expert

• Direct experience leading high severity cyber investigations, threat hunting, and crisis management
• Deep, multi-domain technology experience encompassing cloud environments (AWS, Azure), Zero Trust Network Architecture (ZTNA), and DevSecOps
• Experience with NIST, ISO 27001, or the Australian ASD Essential Eight, and implementing and using Incident Response Frameworks (NIST SP 800-61 Incident Handling Guide, Mitre Frameworks)

• Canberra, Deakin. Melbourne, Richmond or Geelong. WFH hybrid
• 18 + 18-month contract (NV1 security clearance required)
• Sentinel, Microsoft Defender 365 stack, Azure Security Centre, Splunk

The Recruitment Hive is a proud Equal Opportunity Employer. We recognise the value of diverse perspectives and experience and are committed to an inclusive workplace where everyone feels valued and respected for who they are. We encourage people with disability, indigenous, veterans and people of all backgrounds and abilities to express their interest in this role.

Please note that this role closes on the 15th of September @ midday.