Cyber Security SIEM Analyst

TPG Telecom; Sydney; Hybrid; AUD 110,000 - 150,000; Full time

Benefits offered by this job

Flexible hybrid work

Stay Connected Mobile plan

Stay Connected NBN plan

Extra annual leave

Learning Hub access

Corporate discounts

Job summary

TPG Telecom is seeking a Cyber Security SIEM Specialist to own the Splunk Enterprise Security platform, onboard new technologies, and develop detection use cases and data models to boost monitoring and threat response across the Australian environment. You will lead integration efforts, test correlation content, and map CIM sources while aligning with MITRE ATT&CK.

The role emphasizes playbook creation for Splunk SOAR and ongoing improvement of security monitoring capabilities in a hybrid work

Qualifications

• 3+ years of SIEM integration, administration and use case development with Splunk ES.
• Experience across security operations, incident analysis and log management.
• Familiarity with CIM standards and ATT&CK mapping.

Responsibilities

• Lead security tech integration to enable timely threat identification and mitigation.
• Develop and test security event correlation content and use cases.
• Improve and support the SIEM platform amidst evolving threat landscape.
• Assist with security assessments, audits and reviews.
• Map log sources to CIM and strengthen ATT&CK coverage.
• Create playbooks for Splunk SOAR and automation.

Skills

Splunk Enterprise Security

MITRE ATT&CK framework

SIEM integration & use case dev

Threat monitoring & incident response

CIM mapping & log sources

Education

Tertiary IT/Engineering

Tools

Splunk Enterprise Security

Splunk SOAR

Job description

Your Opportunity

The Cyber Security SIEM Specialist is responsible for providing support, administration, and continuous improvement of Splunk Enterprise Security. This includes the onboarding of new technologies, the development of detection use cases/data models and security monitoring scenarios to enhance the Cyber Security Operations team's ability to identify, investigate, and respond to emerging threats across the TPG Telecom environment.

You’ll Make Impact By

• Lead technical security technology integration efforts to facilitate accurate and timely identification and mitigation of cyber security threat.


• Support the development and testing of security event correlation content and threat-based use cases using SIEM technologies


• Support and develop TPG SIEM platform continuous improvement efforts and support TPG in navigating the continuously evolving threat landscape with a focus on bringing that information into the SIEM platform


• Assist with Technology Security sponsored or led security assessments, audits and reviews


• Understanding of the Common Information Model (CIM) and ensuring log sources are mapped and compliant with CIM standards.


• Strong understanding of the MITRE ATT&CK framework, including assessing detection coverage, mapping security events and use cases to ATT&CK techniques, and identifying opportunities to enhance monitoring effectiveness.


• Creating playbooks for Splunk SOAR and automations.


• Maintain up-to-date and thorough understanding of various critical log event sources in various formats including network devices, security platforms, operating systems, applications, and log management platforms like Splunk Enterprise Security.

What You’ll Bring

• Tertiary qualifications in IT or Engineering, or related discipline


• In-depth knowledge of information security concepts and technologies


• 3+ years of in-depth technical SIEM integration, administration and security event correlation use case development experience with Splunk Enterprise Security (preferred)


• Information Security related experience, in areas such as: security operations, incident analysis, incident handling, and vulnerability management or testing, system patching, log analysis, intrusion detection, or firewall administration


• Extensive understanding of cyber security hygiene benchmarks and industry frameworks applicable to VHA’s complex hybrid (on-premise, private and public cloud) environment


• In depth technical skills, includes TCP/IP knowledge, networking and security product experience

Ideally, You Will Also Have

• Good understanding of Telco business desirable

What's in it for you?

• Flexible hybrid way of working (from home and office)


• ‘Stay Connected Mobile’ – Access to a free mobile plan


• ‘Stay Connected NBN’ – Access to a free, high‑speed NBN plan (up to 500 Mbps)


• ‘Your Leave’ - additional leave to be used whenever you like - every year


• Access to TPG Learning Hub platform and internal development opportunities


• Access to Corporate Partner Discounts

Don’t meet every single requirement? That’s OK! At TPG Telecom, we’re all about creating an accessible workplace where everybody feels safe to bring their authentic self to work - regardless of background. If you think this role is a great fit for you but some of the qualifications don’t align with your experience, we still encourage you to apply - you might just be the perfect candidate for a similar role with us! Learn more about life at TPG Telecom here.

TPG Telecom also acknowledges the Gadigal People of the Eora Nation as the Traditional Custodians of lands and waterways where this office can be found in Barangaroo.

Our Talent Acquisition Team and Hiring Managers kindly request no unsolicited resumes or approaches from Recruitment Agencies. TPG Telecom is not responsible for any fees related to unsolicited resumes.

About Us

TPG Telecom started with a belief that we can make things better for Australians. We believe in the power of meaningful relationships to support vibrant, connected communities where everyone belongs. It’s our why; our reason to exist. Now, we’re proud to be one of Australia’s leading mobile and internet providers. We’re not just redefining telco, we’re changing its course. And you play a role in that. A big one. The opportunities are plenty for those who are ready to accept the challenge.

About The Team

Our Technology team builds and evolves the networks and platforms that keep millions of Australians connected every day. From mobile and fixed networks to digital platforms and data, you’ll work at the forefront of innovation solving complex challenges and helping shape the future of connectivity.