Cyber Security Architect: Lead SOC Strategy & Innovation

Macquarietechnologygroup; Sydney; On-site; AUD 180,000 - 260,000; Full time

Job summary

Macquarie Cloud Services is seeking a Cyber Security Architect to define the technology strategy for its Security Operations Centre and lead architectural leadership across SIEM, XDR, and Microsoft security solutions. You will guide analysts, engineers and stakeholders while shaping platforms to detect and remediate threats at scale.

You will mentor teams, design use cases and dashboards, influence security strategy with ACSC Essential Eight, NIST and ISO27001, and collaborate with Product,

Qualifications

• Significant experience in Cyber Security Architecture, Security Engineering or a senior technical security leadership role.
• Strong architecture and solution design experience across enterprise, MSP, consulting or vendor environments.
• Deep expertise across the Microsoft Security stack, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Entra ID, Global Secure Access and Zero Trust principles.
• Strong hands‑on experience building and optimising Microsoft Sentinel detections, analytics rules, workbooks, automation and SOC processes.
• Strong understanding of Security Operations Centre (SOC) design, detection engineering, threat management and security operations processes.
• Hands‑on experience with enterprise SIEM platforms and modern security operations practices.
• Experience designing security use cases, response playbooks, automation opportunities and operational frameworks.
• Strong understanding of cyber threats, adversary tactics and security frameworks including ACSC Essential Eight, NIST, ISO27001, ISM, SABSA or TOGAF.
• In-depth networking knowledge across Layers 3-7, including protocols such as HTTP, HTTPS and SMTP.
• Experience with scripting, automation and analytics technologies including KQL, Python, PowerShell or similar.
• Excellent stakeholder engagement and communication skills, with the ability to influence both technical and non-technical audiences.
• A passion for Cyber Security, innovation and continuous improvement.
• Proven ability to mentor and uplift technical teams within a high-performing environment.
• Australian Citizenship and the ability to obtain and maintain an NV1 Security Clearance.

Responsibilities

• Define the strategy, technology roadmap, platforms and operational processes that underpin Macquarie's Security Operations Centre (SOC).
• Design and evolve managed security services including SIEM-as-a-Service, Extended Detection & Response (XDR), Global Secure Access and Microsoft Security solutions.
• Act as the technical authority for the Microsoft Security stack, including Microsoft Sentinel, Defender XDR, Defender for Endpoint, Defender for Identity, Defender for Office 365, Entra ID and Zero Trust architectures.
• Design, enhance and continuously improve security use cases, detections, dashboards, playbooks and response workflows to improve threat detection, response and operational effectiveness.
• Provide guidance to customers on security strategy, cyber maturity and security framework alignment, including the ACSC Essential Eight, NIST, ISM and ISO27001.
• Provide architectural leadership and technical guidance to SOC analysts, security engineers and other technical stakeholders.
• Evaluate emerging threats, vulnerabilities and security advisories, assessing the impact on customer environments and recommending mitigation strategies.
• Drive continuous improvement across security monitoring, threat detection, automation and incident response through innovation and operational excellence.
• Support customer engagements, technical workshops, solution design discussions and strategic security conversations.
• Collaborate with Product, Operations and Engineering teams to shape the future direction of Macquarie's Managed Security Practice.
• Mentor and develop team members, fostering a culture of learning, innovation and technical excellence.

Skills

Cyber security architecture

Security engineering

SOC design

Microsoft security stack

Sentinel

XDR

Defender for Endpoint

Defender for Identity

Defender for Office 365

Entra ID

Zero Trust

Scripting

Python

PowerShell

KQL

Automation

Stakeholder engagement

Tools

Microsoft Sentinel

Defender XDR

Defender for Endpoint

Defender for Identity

Defender for Office 365

Entra ID

Zero Trust

Job description

Macquarie Cloud Services is seeking a Cyber Security Architect to define the technology strategy for its Security Operations Centre and lead architectural leadership across SIEM, XDR, and Microsoft security solutions. You will guide analysts, engineers and stakeholders while shaping platforms to detect and remediate threats at scale.

You will mentor teams, design use cases and dashboards, influence security strategy with ACSC Essential Eight, NIST and ISO27001, and collaborate with Product,