Cyber Security Automation Engineer

IT Alliance; Canberra; On-site; AUD 110,000 - 150,000; Full time

Job summary

IT Alliance is seeking a Cyber Security Automation Engineer in Canberra to design and build automation playbooks for a Federal Government client. You will translate security requirements into automated solutions and drive improvements across detection and incident response.

The role requires 5+ years of hands‑on experience, SIEM/SOAR integrations via APIs, and scripting in Ansible, Python, and PowerShell. You will communicate outcomes to technical and non‑technical stakeholders and identify

Qualifications

• 5+ years hands-on experience designing and building cyber security automation playbooks and workflows in enterprise or government environments.
• Experience integrating SIEM/SOAR platforms with enterprise security and IT systems via APIs, webhooks and connectors.
• Strong scripting in Ansible, Python, PowerShell and related security automation tools.
• Understanding of security operations processes including incident triage, threat hunting, vulnerability management and incident response.
• Ability to translate security requirements into automated technical solutions and communicate outcomes to technical and non-technical stakeholders.

Responsibilities

• Identify high-value automation opportunities across detection, monitoring, investigation, threat hunting and incident response processes.

Skills

Cyber security automation

SIEM/SOAR integration

Scripting: Ansible, Python, PowerShell

Security operations knowledge

Automation opportunity identification

Tools

Ansible

Python

PowerShell

Job description

One of our Federal Government clients is looking for Cyber Security Automation Engineer in Canberra.

We are looking for the following Skills/Experience:

• 5+ years of hands-on experience designing and building cyber security automation playbooks, workflows in an enterprise or government environment.
• Experience integrating SIEM/SOAR platforms with enterprise security and IT systems via APIs, webhooks and custom connectors.
• Strong scripting skill in Ansible, Python, PowerShell etc security automation and tool integration.
• Understanding of security operations process including incident triage, threat hunting, vulnerability management and incident response.
• Ability to translate security requirements into automated technical solutions and communicate outcomes to technical and non-technical stakeholders.
• Identify high-value opportunities for automation across detection, monitoring, investigation, threat hunting and incident response process.

Note - We are equal employment opportunity provider and encourage applications from people with disability. Please let us know if you need special assistance for this job application.