Cyber Security Architect

Macquarie Technology Group; Sydney; Hybrid; AUD 180,000 - 240,000; Full time

Job summary

Macquarie Cloud Services in Sydney seeks a Cyber Security Architect to define the strategy and evolution of its Security Operations Centre, guiding security analysts and engineers while aligning security outcomes with customer needs.

You will provide architectural leadership across threat management, security automation and use-case development, mentoring teams and collaborating with Product, Operations and Engineering to strengthen managed security services.

Qualifications

• Significant experience in Cyber Security Architecture or a senior technical security role.
• Deep expertise with the Microsoft Security stack and related products.
• Hands-on experience with enterprise SIEM, detections and SOC processes.
• Strong understanding of security frameworks and threat management.

Responsibilities

• Define strategy and roadmap for Macquarie's Security Operations Centre (SOC).
• Design and evolve managed security services including SIEM and XDR capabilities.
• Act as the technical authority for the Microsoft Security stack and related tools.
• Lead the design of detections, playbooks and response workflows.
• Mentor SOC analysts and engineers, collaborating with Product and Engineering teams.

Skills

Cyber Security Architecture

Security Engineering

Microsoft Security stack

Microsoft Sentinel

SOC design

Automation & scripting

Tools

Microsoft Sentinel

Defender XDR

Defender for Endpoint

Defender for Identity

Defender for Office 365

Entra ID

Zero Trust

Job description

About Us

At Macquarie Cloud Services, our people are at the heart of everything we do. That’s why we’re proud to be Australia’s #1 Great Place to Work in Technology for 2026, Australia’s #1 Great Place to Work for two consecutive years, and Great Place to Work Certified for three years running.

Macquarie Cloud Services are the Australian specialists in cloud services for business and government. Locally owned and operated, with an industry-leading customer service model, we’re trusted by our customers to provide the services that enable their business success.

We have made it our challenge to make our people feel good and love the work they do. Because of this, our people are energised and motivated in their work.

The Opportunity.

In this role, you will be responsible for defining and evolving the technology, platforms, use cases and processes that power Macquarie Cloud Services' Security Operations Centre (SOC). As the Cyber Security Architect, you will provide the technical vision and leadership that enables our SOC to detect, respond to and remediate cyber threats at scale across a diverse customer base.

You will act as the technical authority across our Managed Security Practice, guiding security analysts, engineers and stakeholders while continuously improving our managed security services. Working closely with Product, Operations and Engineering teams, you will help shape our security strategy, evaluate emerging threats, design new capabilities and ensure our customers remain protected in an ever-evolving threat landscape.

You'll combine strategic thinking with hands-on technical leadership, contributing to architecture, detection engineering, threat management, security automation and service innovation. Whether developing new security use cases, evaluating Microsoft security technologies or mentoring the next generation of security professionals, you'll play a key role in strengthening Macquarie's position as a leader in managed security services.

Why Us?

• Australia's #1 Great Place To Work in Technology, 2026.
• We have been awarded Australia's #1 Great Place to Work 2025 for the second year running!
• We'reGreat Place to Work Certified 2023, 2024 and 2025.
• For the third year in a row, we have been named aGlobal Winner of the 2026 Gallup Exceptional Workplace Award!
• We're the#1 Managed Services Cloud business in Australia.
• We have thehighest Net Promoter Score on the ASX,World's best customer experience & crowned in 2020 at the World Communications Awards.
• You’ll make an impact: Enjoy being part of a driven team with a collaborative culture that values decision-makers and action.
• We Invest in you: Accelerate your career through our learning and development opportunities - think Gallup strengths-based training, defined career pathways and fantastic internal mobility opportunities across the group.

What you’ll be doing.

• Define the strategy, technology roadmap, platforms and operational processes that underpin Macquarie's Security Operations Centre (SOC).
• Design and evolve managed security services including SIEM-as-a-Service, Extended Detection & Response (XDR), Global Secure Access and Microsoft Security solutions.
• Act as the technical authority for the Microsoft Security stack, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Entra ID and Zero Trust architectures.
• Design, enhance and continuously improve security use cases, detections, dashboards, playbooks and response workflows to improve threat detection, response and operational effectiveness.
• Provide guidance to customers on security strategy, cyber maturity and security framework alignment, including the ACSC Essential Eight, NIST, ISM and ISO27001.
• Provide architectural leadership and technical guidance to SOC analysts, security engineers and other technical stakeholders.
• Evaluate emerging threats, vulnerabilities and security advisories, assessing the impact on customer environments and recommending mitigation strategies.
• Drive continuous improvement across security monitoring, threat detection, automation and incident response through innovation and operational excellence.
• Support customer engagements, technical workshops, solution design discussions and strategic security conversations.
• Collaborate with Product, Operations and Engineering teams to shape the future direction of Macquarie's Managed Security Practice.
• Mentor and develop team members, fostering a culture of learning, innovation and technical excellence.

Required Skills and Experience.

• Significant experience in Cyber Security Architecture, Security Engineering or a senior technical security leadership role.
• Strong architecture and solution design experience across enterprise, MSP, consulting or vendor environments.
• Deep expertise across the Microsoft Security stack, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Entra ID, Global Secure Access and Zero Trust principles.
• Strong hands‑on experience building and optimising Microsoft Sentinel detections, analytics rules, workbooks, automation and SOC processes.
• Strong understanding of Security Operations Centre (SOC) design, detection engineering, threat management and security operations processes.
• Hands‑on experience with enterprise SIEM platforms and modern security operations practices.
• Experience designing security use cases, response playbooks, automation opportunities and operational frameworks.
• Strong understanding of cyber threats, adversary tactics and security frameworks including ACSC Essential Eight, NIST, ISO27001, ISM, SABSA or TOGAF.
• In‑depth networking knowledge across Layers 3-7, including protocols such as HTTP, HTTPS and SMTP.
• Experience with scripting, automation and analytics technologies including KQL, Python, PowerShell or similar.
• Excellent stakeholder engagement and communication skills, with the ability to influence both technical and non‑technical audiences.
• A passion for Cyber Security, innovation and continuous improvement.
• Proven ability to mentor and uplift technical teams within a high‑performing environment.
• Australian Citizenship and the ability to obtain and maintain an NV1 Security Clearance.