Cyber Security Automation Engineer — Build Security Playbooks

IT Alliance; Canberra; On-site; AUD 110,000 - 150,000; Full time

Job summary

IT Alliance is seeking a Cyber Security Automation Engineer in Canberra to design and build automation playbooks for a Federal Government client. You will translate security requirements into automated solutions and drive improvements across detection and incident response.

The role requires 5+ years of hands‑on experience, SIEM/SOAR integrations via APIs, and scripting in Ansible, Python, and PowerShell. You will communicate outcomes to technical and non‑technical stakeholders and identify

Qualifications

• 5+ years hands-on experience designing and building cyber security automation playbooks and workflows in enterprise or government environments.
• Experience integrating SIEM/SOAR platforms with enterprise security and IT systems via APIs, webhooks and connectors.
• Strong scripting in Ansible, Python, PowerShell and related security automation tools.
• Understanding of security operations processes including incident triage, threat hunting, vulnerability management and incident response.
• Ability to translate security requirements into automated technical solutions and communicate outcomes to technical and non-technical stakeholders.

Responsibilities

• Identify high-value automation opportunities across detection, monitoring, investigation, threat hunting and incident response processes.

Skills

Cyber security automation

SIEM/SOAR integration

Scripting: Ansible, Python, PowerShell

Security operations knowledge

Automation opportunity identification

Tools

Ansible

Python

PowerShell

Job description

IT Alliance is seeking a Cyber Security Automation Engineer in Canberra to design and build automation playbooks for a Federal Government client. You will translate security requirements into automated solutions and drive improvements across detection and incident response.

The role requires 5+ years of hands‑on experience, SIEM/SOAR integrations via APIs, and scripting in Ansible, Python, and PowerShell. You will communicate outcomes to technical and non‑technical stakeholders and identify