Cyber Security Operations Specialist

Triniti; Melbourne; Hybrid; AUD 120,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangement

Job summary

Triniti seeks an experienced Cyber Security Operations Specialist to join a Federal Government client, emphasising detection engineering, threat hunting, security automation and continuous improvement. The role covers Microsoft Sentinel/Defender in cloud environments, and requires active NV1 clearance and Australian citizenship.

Hybrid work is available with office attendance 1-2 days per week; candidates from across Australia are welcome to apply.

Qualifications

• Australian Citizen with NV1 clearance is mandatory.
• Experience in Federal Government environments is advantageous.
• Hands-on experience in security monitoring, threat detection, incident response and investigations.

Responsibilities

• Configure and optimise security monitoring platforms (Microsoft Sentinel/Defender).
• Develop and tune detection rules, queries and dashboards.
• Conduct threat hunting, security investigations and incident response activities.
• Perform root cause analyses and implement remediation measures.
• Develop security automation, scripts and response playbooks to improve efficiency.
• Support vulnerability management and security controls across cloud environments.
• Collaborate with technical teams to enhance monitoring and resilience.

Skills

Cyber security operations

Threat detection

Incident response

KQL

Security automation

Cloud security

Azure

Tools

Microsoft Sentinel

Microsoft Defender

SIEM/SOAR

Job description

triniti is seeking an experienced Cyber Security Operations Specialist, with an existing NV1 security clearance, to join a Federal Government client.

This is a strong hands-on technical role focused on strengthening cyber security operations, threat detection and incident response capabilities across cloud-hosted environments.

Working closely with cyber security, development and DevOps teams, you will leverage technologies including Microsoft Sentinel and Defender to monitor and investigate security threats, develop and optimise detection capabilities, respond to incidents and implement improvements to the organisation's overall security posture.

The role offers an opportunity to contribute to both the development and ongoing operation of security capabilities, with a particular emphasis on detection engineering, threat hunting, security automation and continuous improvement.

Please note: While this position is advertised in Melbourne, candidates can be based in any Australian capital city. Hybrid working arrangements apply, with attendance at the relevant office required one to two days per week.

Key Responsibilities

• Configure, manage and optimise security monitoring platforms, particularly Microsoft Sentinel and Defender.
• Develop and tune detection rules, KQL queries, dashboards and alerting capabilities.
• Conduct proactive threat hunting, security investigations and incident response activities.
• Investigate security incidents, perform root cause analysis and implement remediation measures.
• Develop security automation, scripts and response playbooks to improve operational efficiency.
• Support vulnerability management and the implementation of security controls across cloud environments.
• Collaborate with technical teams to improve security monitoring, detection coverage and overall cyber resilience.

Skills & Experience Required

• Australian Citizen with existing NV1 clearance is mandatory.
• Previous experience within Federal Government environments would be advantageous.
• Strong hands-on experience in cyber security operations, including security monitoring, threat detection, incident response and investigation.
• Demonstrated experience with SIEM/SOAR technologies, ideally Microsoft Sentinel.
• Strong knowledge of KQL, detection engineering, analytics rules and alert optimisation.
• Experience with Microsoft Defender and security monitoring across enterprise or cloud environments.
• Experience developing security automation, scripts and response playbooks.
• Sound understanding of cloud security, ideally within Microsoft Azure environments.
• Familiarity with cyber security frameworks and best practices, including the ISM and Essential Eight.

As a 100% Australian-owned and locally based IT recruitment firm, Triniti has a dedicated Federal Government practice offering responsive delivery, competitive pricing and a deeply experienced team that understands Commonwealth environments.

What next

The role closes for submission on Friday 30th October.