Cyber Security Engineer (SIEM)

Talent; City of Parramatta; On-site; AUD 150,000 - 210,000; Full time

Job summary

Talent in Sydney has a Senior Cyber Security Engineer role focused on hands-on Splunk Cloud engineering for an enterprise environment. You will design, implement, and optimize the Splunk Cloud architecture while onboarding new log sources and tuning ES correlation searches. The role combines platform architecture, engineering, implementation and BAU support, with mentorship for five to six engineers, mostly onsite at Sydney Olympic Park.

Qualifications

• Extensive hands-on Splunk experience at senior level.
• Strong experience with Splunk Cloud and Enterprise Security.
• Experience across platform architecture, configuration and implementation.
• Log onboarding, forwarders, indexes, data models and parsing.

Responsibilities

• Design and improve the Splunk Cloud architecture.
• Deliver hands-on Splunk engineering and implementation.
• Onboard and integrate new log sources and security technologies.
• Configure parsing, indexing, data models, dashboards and alerts.
• Develop and tune Splunk ES correlation searches and detection use cases.
• Monitor platform health, performance and data quality.
• Translate designs into working technical solutions.
• Support BAU activities, incidents and major programs.
• Identify opportunities to improve platform capability and efficiency.
• Mentor and upskill engineers.

Skills

Splunk

SIEM

Cloud security

Mentoring

BAU support

Tools

Splunk Cloud

Splunk Enterprise Security

SPL

Job description

Contract until 30 June 2027, with possible extension

Sydney Olympic Park | Predominantly onsite

• Contract until 30 June 2027, with possible extension
• Senior hands‑on Splunk Cloud engineering role
• Sydney Olympic Park | Predominantly onsite

The opportunity

A large, complex organisation is seeking a Senior Cyber Security Engineer with deep hands‑on Splunk expertise. You will support and improve an enterprise Splunk Cloud environment covering approximately 30,000 devices.

This role combines platform architecture, engineering, implementation and BAU support. You will work alongside cybersecurity architects on major programs while mentoring engineers and strengthening the organisation’s internal Splunk capability.

Key responsibilities

• Design and improve the Splunk Cloud architecture.
• Deliver hands‑on Splunk engineering and implementation.
• Onboard and integrate new log sources and security technologies.
• Configure parsing, indexing, data models, dashboards and alerts.
• Develop and tune Splunk ES correlation searches and detection use cases.
• Monitor platform health, performance, data quality and ingestion.
• Translate architectural designs into working technical solutions.
• Support BAU activities, incidents and major cybersecurity programs.
• Identify opportunities to improve platform capability and efficiency.
• Mentor and upskill approximately five to six engineers.

Skills and experience

• Extensive hands‑on experience with Splunk at senior engineering, design or architecture level.
• Strong experience with Splunk Cloud and Splunk Enterprise Security.
• Demonstrated capability across platform architecture, configuration, administration and implementation.
• Experience with log onboarding, forwarders, indexes, source types, parsing and data models.
• Strong SPL skills, including dashboards, alerts, correlation searches and detection use cases.
• Experience managing enterprise‑scale SIEM platforms and large data volumes.
• Ability to troubleshoot performance, integration and data‑quality issues.
• Strong communication skills and experience mentoring technical teams.
• Ability to work independently across BAU activities and complex programs.

Broader engineering experience in one or more of the following areas is highly desirable:

• Cloud security
• DevSecOps and security automation
• Network security
• Endpoint or end-device security
• Cybersecurity engineering and architecture