Cyber Security Engineer

Macquarie Technology Group; Sydney; On-site; AUD 90,000 - 130,000; Full time

Job summary

Macquarie Technology Group in Canberra is seeking a Security Engineer to join our growing cyber security team. The role focuses on hands-on Splunk work, log onboarding, detection engineering and security monitoring in a SOC environment.

You will onboard logs, develop detection logic, investigate alerts, and support incident triage across client environments. This on-site position requires Australian citizenship and security clearance eligibility, with opportunities to grow technical capability

Qualifications

• 1. 18 months to 4 years of experience in a SOC or cyber security environment.
• 2. Hands-on experience with Splunk log onboarding, use case development, detection engineering and security monitoring.
• 3. Understanding of how security data flows into a SIEM and developing detections.

Responsibilities

• Monitor, triage, investigate, and respond to security alerts and incidents in the SOC.
• Onboard and integrate new log sources into Splunk; write data inputs and validate data quality.
• Develop and optimise Splunk searches, dashboards, alerts, and detection logic to improve threat detection.

Skills

Splunk

Log onboarding

Detection engineering

Security monitoring

Incident response

Tools

Splunk

Job description

20h ago , from Macquarie Technology Group

We’re growing, not slowing, here at Macquarie Technology Group because we’re passionate about doing things differently. We want to challenge the industry and look for better ways of doing things. As a team, Macquarie Government are hardworking, results and success focused. We also take the time to celebrate our success and make sure our people are doing work that makes a difference.

We believe that collaboration & team connection is key for success. This role will be based in Canberra on-site with one of our clients.

We require security clearance for this role you must be anAustralian citizento be eligible to obtain a security clearance or ideally already hold NV1 security clearance.

The Opportunity

We're looking for a Security Engineer to join our growing cyber security team in Canberra. This opportunity is ideal for someone with around 18 months to 4 years' experience in a SOC or cyber security environment who has hands‑on experience with Splunk log onboarding, use case development, detection engineering and security monitoring.

You’ll play a key role in onboarding and normalising log sources, building and tuning detections, investigating alerts, and supporting incident triage and response activities across customer environments. We’re looking for someone who understands how security data flows into a SIEM, can work through detection logic, and enjoys improving visibility and security outcomes through well-designed use cases and analytics.

Working alongside experienced cyber professionals, you’ll continue to develop your skills across Splunk, detection engineering, threat monitoring and incident response while supporting environments that genuinely matter. If you’re curious, proactive, and eager to grow your technical capability in a high‑performing team, this could be a great next step in your cyber security career.

What You’ll Be Doing

• Monitoring, triaging, investigating, and responding to security alerts and incidents within our Security Operations Centre (SOC)
• Onboarding and integrating new log sources into Splunk, including writing and tuning data inputs, parsing configurations, field extractions, and validating data quality
• Developing, refining, and optimising Splunk searches, dashboards, alerts, and detection logic to improve threat detection capability
• Investigating security events, identifying patterns, determining severity, and escalating incidents in line with established playbooks and procedures
• Contributing to the continuous improvement and uplift of SOC processes, runbooks, and detection logic
• Collaborating with internal cloud, network, endpoint, and engineering teams to improve log coverage and security monitoring across environments
• Keeping up with the evolving threat landscape and bringing practical ideas to improve the team’s capability