Cyber Security Engineer

Whizdom; Sydney; On-site; AUD 168,000 - 220,000; Full time

Job summary

Whizdom invites applications for a Cyber Security Engineer role focused on SIEM, security operations and enterprise tooling in Sydney. You will contribute to threat detection, monitoring and incident response across on‑premises and cloud environments.

Join a high‑caliber team delivering secure architectures, dashboards, detections and automation while aligning with ACSC ISM, NIST and ISO 27001 standards. Collaboration with stakeholders will be essential to strengthen cyber resilience.

Qualifications

• Experience in Cyber Security Engineering within large and complex environments.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel or Elastic.
• Experience building security monitoring frameworks, detections, alerts and dashboards.
• Knowledge of SOAR technologies and security automation.
• Strong understanding of threat hunting, incident response and detection engineering.
• Experience with EDR technologies including CrowdStrike, Microsoft Defender or Trend Micro.
• Exposure to vulnerability management platforms such as Tenable or similar solutions.
• Knowledge of cyber security frameworks including ACSC ISM, NIST and ISO 27001.
• Experience supporting both cloud and on-premises technology environments.
• Scripting capability using PowerShell, Bash and/or Python.
• Excellent communication, stakeholder management and problem-solving skills.

Responsibilities

• Design secure cyber security architectures and solutions.
• Develop and enhance SIEM monitoring and detection capabilities.
• Build dashboards, correlation rules, alerts and security use cases.
• Support threat hunting, detection engineering and incident response activities.
• Manage and optimise enterprise security tooling.
• Identify security vulnerabilities and drive remediation activities.
• Implement security automation and orchestration solutions.
• Provide cyber security guidance across projects and ensure compliance.

Skills

SIEM expertise

Security operations

Threat detection

Threat hunting

Incident response

Scripting (PowerShell/Bash/Python)

Communication skills

Stakeholder management

Tools

Splunk

Microsoft Sentinel

Elastic

CrowdStrike

Microsoft Defender

Trend Micro

Tenable

SOAR platforms

Kubernetes

Ansible

Job description

Our client is a large and highly respected government organisation responsible for protecting critical public services and critical infrastructure across New South Wales. Operating within a complex and security-sensitive environment, they continue to invest heavily in advanced cyber security capabilities, security operations, threat detection, automation and digital resilience.

As part of a significant cyber security uplift program, they are seeking an experienced Cyber Security Engineer with strong SIEM and Security Operations expertise to help strengthen and evolve their enterprise security capability.

About the Role

We are seeking an experienced Cyber Security Engineer (SIEM) to join a high-performing Cyber Security team responsible for safeguarding critical systems, networks, applications and information assets.

This role will focus on security engineering, threat detection, security monitoring, SIEM optimisation and automation initiatives across both on-premises and cloud environments. Working closely with security architects, infrastructure teams and operational stakeholders, you will play a key role in reducing cyber risk and improving the organisation's overall security posture.

Key responsibilities include:

• Designing and implementing secure cyber security architectures and solutions.
• Developing and enhancing SIEM monitoring and detection capabilities.
• Building dashboards, correlation rules, alerts and security use cases.
• Supporting threat hunting, detection engineering and incident response activities.
• Managing and optimising enterprise security tooling.
• Identifying security vulnerabilities and driving remediation activities.
• Implementing security automation and orchestration solutions.
• Providing cyber security guidance and assurance across projects.
• Ensuring compliance with recognised cyber security frameworks and standards.
• Collaborating with internal stakeholders to continuously improve cyber resilience.

The Successful Candidate

You are a hands-on Cyber Security Engineer with strong experience across Security Operations, SIEM platforms and enterprise security tooling. You enjoy solving complex security challenges and have a proactive approach to threat detection and risk reduction.

You will bring:

• Demonstrated experience in Cyber Security Engineering within large and complex environments.
• Strong hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel or Elastic.
• Experience building security monitoring frameworks, detections, alerts and dashboards.
• Knowledge of SOAR technologies and security automation.
• Strong understanding of threat hunting, incident response and detection engineering.
• Experience with EDR technologies including CrowdStrike, Microsoft Defender or Trend Micro.
• Exposure to vulnerability management platforms such as Tenable or similar solutions.
• Knowledge of cyber security frameworks including ACSC ISM, NIST and ISO 27001.
• Experience supporting both cloud and on-premises technology environments.
• Scripting capability using PowerShell, Bash and/or Python.
• Excellent communication, stakeholder management and problem-solving skills.

Highly desirable:

• SIEM content development and advanced detection engineering experience.
• Exposure to Kubernetes, containerisation and cloud-native security.
• Experience with security automation platforms such as Ansible, Salt or SCCM.
• Knowledge of MITRE ATT&CK and Cyber Kill Chain methodologies.
• Relevant cyber security certifications including IRAP or equivalent.
• Experience within government, critical infrastructure or highly regulated environments.

What's on Offer

• Contract opportunity through to June 2027.
• Competitive market rate up to $1,050 per day.
• Opportunity to work on a large-scale cyber security transformation program.
• Exposure to cutting-edge security technologies and enterprise environments.
• High-impact role protecting critical public services and infrastructure.
• Collaborative and technically mature cyber security team.
• Sydney-based position with predominantly onsite engagement.