Cyber Security Engineer (SIEM)

Talent Corp; City of Parramatta; On-site; AUD 170,000 - 210,000; Full time

Job summary

Talent Corp in Sydney Olympic Park is seeking a Senior Cyber Security Engineer with deep hands-on Splunk expertise to support a large enterprise Splunk Cloud environment spanning ~30,000 devices. This role combines platform architecture, engineering, implementation and BAU support.

You will mentor five to six engineers and collaborate with cybersecurity architects on major programs, while onboarding new log sources and tuning dashboards and detections.

Qualifications

• Extensive hands-on Splunk Cloud engineering experience.
• Strong Splunk Enterprise Security expertise.
• Experience in platform architecture and implementation.
• Proficient in log onboarding, forwarding, indices and data models.
• Strong SPL skills with dashboards, alerts and detection use cases.
• Experience managing large enterprise SIEM deployments.

Responsibilities

• Design and improve the Splunk Cloud architecture.
• Deliver hands-on Splunk engineering and implementation.
• Onboard and integrate new log sources and security technologies.
• Configure parsing, indexing, data models, dashboards and alerts.
• Develop and tune ES correlation searches and detection use cases.
• Monitor platform health and data quality.
• Translate designs into working technical solutions.
• Support BAU activities, incidents and major programs.
• Mentor engineers to upskill the team.
• Identify opportunities to improve platform capability and efficiency.

Skills

Splunk Cloud

Splunk ES

SIEM design

SPL scripting

Log onboarding

Mentoring engineers

BAU support

Job description

Contract until 30 June 2027, with possible extension

Sydney Olympic Park | Predominantly onsite

• Contract until 30 June 2027, with possible extension

• Senior hands-on Splunk Cloud engineering role

• Sydney Olympic Park | Predominantly onsite

The opportunity

A large, complex organisation is seeking a Senior Cyber Security Engineer with deep hands-on Splunk expertise. You will support and improve an enterprise Splunk Cloud environment covering approximately 30,000 devices.

This role combines platform architecture, engineering, implementation and BAU support. You will work alongside cybersecurity architects on major programs while mentoring engineers and strengthening the organisation's internal Splunk capability.

Key responsibilities

• Design and improve the Splunk Cloud architecture.

• Deliver hands-on Splunk engineering and implementation.

• Onboard and integrate new log sources and security technologies.

• Configure parsing, indexing, data models, dashboards and alerts.

• Develop and tune Splunk ES correlation searches and detection use cases.

• Monitor platform health, performance, data quality and ingestion.

• Translate architectural designs into working technical solutions.

• Support BAU activities, incidents and major cybersecurity programs.

• Identify opportunities to improve platform capability and efficiency.

• Mentor and upskill approximately five to six engineers.

Skills and experience

• Extensive hands-on experience with Splunk at senior engineering, design or architecture level.

• Strong experience with Splunk Cloud and Splunk Enterprise Security.

• Demonstrated capability across platform architecture, configuration, administration and implementation.

• Experience with log onboarding, forwarders, indexes, source types, parsing and data models.

• Strong SPL skills, including dashboards, alerts, correlation searches and detection use cases.

• Experience managing enterprise-scale SIEM platforms and large data volumes.

• Ability to troubleshoot performance, integration and data-quality issues.

• Strong communication skills and experience mentoring technical teams.

• Ability to work independently across BAU activities and complex programs.

Broader engineering experience in one or more of the following areas is highly desirable:

• Cloud security

• DevSecOps and security automation

• Network security

• Endpoint or end-device security

• Cybersecurity engineering and architecture