Cyber Security Engineer

Orro Group; City of Brisbane; Hybrid; AUD 100,000 - 140,000; Full time

Benefits offered by this job

Hybrid work model

Competitive pay + benefits

Job summary

Orro Group is seeking a Cyber Security Engineer with SentinelOne expertise to lead security engagements from scoping to deployment. You will work with customers and the cyber engineering team to implement EDR, SIEM, and cloud security across diverse environments.

You will design, deploy and optimise SentinelOne, SIEM, and related automation, while producing clear reports and pragmatic security guidance for clients. The role is hybrid with offices in Australia and a focus on customer outcomes.

Qualifications

• Minimum 2 years in a customer-facing or consulting cyber security role.
• Hands-on SentinelOne experience across data connector configuration and detection rules.
• Solid understanding of Microsoft Azure, cloud security fundamentals, and SIEM threat detection.

Responsibilities

• Lead and own customer engagements end-to-end from scoping to delivery.
• Design, deploy, configure and optimise SentinelOne and SIEM environments.
• Configure automation, incident response playbooks and alerts across SIEM/SOAR
• Build dashboards and UEBA configurations for threat visibility
• Provide technical documentation and customer-ready reports

Skills

Customer facing

Communication

SentinelOne

Cloud security

Tools

SentinelOne

SIEM

Power Query

PowerShell

Job description

Sydney | Brisbane | Melbourne | Hybrid Work Model | Competitive base + super + benefits

We are not your typical cyber team. We are collaborative, curious and customer obsessed, and we are looking for a Cyber Security Engineer specialising in SentinelOne to join our Cyber Engineering team. You will work directly with customers, owning and delivering security engagements end to end across EDR, XDR, SIEM and cloud native security operations. From scoping through to deployment and reporting, you will help strengthen customer security postures while managing your own engagements and building trusted advisory relationships across a diverse client base.

About Orro

We're an Australian success story, now close to 500 people strong, delivering secure, end to end digital solutions across cloud, collaboration, cyber security, data services and network infrastructure, all backed by over 20 years of experience. Trusted by some of Australia's biggest brands, Orro leads the way in designing, building and operating digital infrastructure that delivers greater efficiency, agility, performance and resilience. Our solutions take the stress out of tech for more than 400 businesses and over 20 million Australians every single day.

Our mission? To create "future now" solutions making it faster, simpler and safer for people to access, store and share information, wherever they are and whoever they're with. But more than that, we know that real impact comes from connecting people, not just machines. That's why we take the time to understand our clients; how they work, what matters to them, and where they're headed so we can deliver not just what they need today, but what they'll need next.

With offices in Sydney, Melbourne, Canberra, Brisbane and Perth, and teams across New Zealand, the Philippines and the UK, Orro is known for delivering future ready solutions, backed by deep expertise, genuine human insight and lasting partnerships.

What You'll Be Doing

In this role, you will deliver consulting led cyber security services with a SentinelOne specialisation across a range of customer environments. Working closely with the Cyber Security Engineering Manager and the wider cyber team, you will plan and execute security engagements, manage delivery milestones, and provide hands on implementation and advisory support across security and cloud platforms. You will balance deep technical expertise with strong customer engagement, ensuring every engagement is delivered efficiently, professionally, and to a high standard.

• Lead and own customer engagements end to end, from scoping and kickoff through to delivery, as the trusted technical point of contact
• Design, deploy, configure and optimise SentinelOne and SIEM environments, including data connector integration, detection rules, Power Query and custom alerting
• Configure and manage automation, incident response playbooks and automation rules across SIEM and SOAR
• Build workbooks, dashboards and UEBA configurations to sharpen threat visibility and operational insight
• Conduct security operations assessments and threat detection capability reviews, providing pragmatic best practice guidance
• Produce clear technical documentation and customer ready reports to a consistently high standard

What You'll Bring

The Essentials

• Minimum 2 years of experience in a customer facing or consulting cyber security role, with strong communication skills and the ability to manage multiple engagements at the same time
• Hands on experience with SentinelOne across data connector configuration, detection rules, hyperautomation, and workbook or dashboard development
• Solid understanding of Microsoft Azure, cloud security fundamentals, and SIEM based threat detection and incident response

Bonus Points

• Additional SentinelOne certifications such as SIREN or Paladin
• Advanced threat hunting experience and working knowledge of adversary TTPs
• Scripting skills across Power Query, PowerShell, Python or Bash, and experience across Windows and Linux environments

Even if you don't tick every box, don't let that hold you back. If this sounds like your kind of challenge, we'd genuinely love to hear from you.

Why Orro?

At Orro, we're proud to support our people and the people who matter most to them in meaningful and inclusive ways. From public holiday swaps that embrace family and cultural diversity, to generous parental and caregiver leave, flexible work options, and company wide mentoring, we're here to help you thrive at every stage of life. We also invest in the future through our Emerging Leaders Development Program, nurturing the next generation of talent from within. On top of that, you'll enjoy 3 days of paid volunteer leave each year, novated leasing, employee discounts, and full access to our wellbeing platform packed with expert fitness plans, nutrition tips, and tools to help you feel your best, inside and out.

Note: The role is subject to state and federal police background checks. Applicants must have the unrestricted right to work in Australia. Visa sponsorship is not available for this position.