Cyber Security Engineer (SIEM)

Talent; Sydney; On-site; AUD 140,000 - 210,000; Full time

Job summary

Talent is seeking a Senior Cyber Security Engineer with deep hands-on Splunk Cloud expertise to support an enterprise environment of ~30,000 devices in Sydney Olympic Park. The role blends platform architecture, engineering, implementation and BAU support, working with security architects and mentoring a team of engineers.

You will onboard log sources, configure parsing and data models, develop correlation searches and dashboards, and ensure platform health and data quality across Splunk Cloud

Qualifications

• Extensive hands-on experience with Splunk in senior engineering, design or architecture roles.
• Strong experience with Splunk Cloud and Splunk Enterprise Security.
• Proven ability to design, configure and implement enterprise SIEM solutions.

Responsibilities

• Design and improve the Splunk Cloud architecture.
• Deliver hands-on Splunk engineering and implementation.
• Onboard and integrate new log sources and security technologies.
• Configure parsing, indexing, data models, dashboards and alerts.
• Develop and tune Splunk ES correlation searches and detection use cases.
• Monitor platform health, performance, data quality and ingestion.
• Translate architectural designs into working technical solutions.
• Support BAU activities, incidents and major cybersecurity programs.
• Identify opportunities to improve platform capability and efficiency.
• Mentor and upskill engineers.

Skills

Splunk Cloud

Splunk ES

SPL

SIEM

Platform architecture

Dashboards

Data models

Alerts

Mentoring

BAU support

Job description

Contract until 30 June 2027, with possible extension

Sydney Olympic Park | Predominantly onsite

Contract until 30 June 2027, with possible extension

Senior hands‑on Splunk Cloud engineering role

Sydney Olympic Park | Predominantly onsite

The opportunity

A large, complex organisation is seeking a Senior Cyber Security Engineer with deep hands‑on Splunk expertise. You will support and improve an enterprise Splunk Cloud environment covering approximately 30,000 devices.

This role combines platform architecture, engineering, implementation and BAU support. You will work alongside cybersecurity architects on major programs while mentoring engineers and strengthening the organisation’s internal Splunk capability.

Key responsibilities

• Design and improve the Splunk Cloud architecture.
• Deliver hands‑on Splunk engineering and implementation.
• Onboard and integrate new log sources and security technologies.
• Configure parsing, indexing, data models, dashboards and alerts.
• Develop and tune Splunk ES correlation searches and detection use cases.
• Monitor platform health, performance, data quality and ingestion.
• Translate architectural designs into working technical solutions.
• Support BAU activities, incidents and major cybersecurity programs.
• Identify opportunities to improve platform capability and efficiency.
• Mentor and upskill approximately five to six engineers.

Skills And Experience

• Extensive hands‑on experience with Splunk at senior engineering, design or architecture level.
• Strong experience with Splunk Cloud and Splunk Enterprise Security.
• Demonstrated capability across platform architecture, configuration, administration and implementation.
• Experience with log onboarding, forwarders, indexes, source types, parsing and data models.
• Strong SPL skills, including dashboards, alerts, correlation searches and detection use cases.
• Experience managing enterprise‑scale SIEM platforms and large data volumes.
• Ability to troubleshoot performance, integration and data‑quality issues.
• Strong communication skills and experience mentoring technical teams.
• Ability to work independently across BAU activities and complex programs.

Broader engineering experience in one or more of the following areas is highly desirable:

• Cloud security
• DevSecOps and security automation
• Network security
• Endpoint or end-device security
• Cybersecurity engineering and architecture