Remote SOC Detection & AI Security Engineer

Powerdatagroup; Canberra; Hybrid; AUD 140,000 - 190,000; Full time

Job summary

Powerdatagroup seeks a Threat Detection Engineer to design and implement detection content across SIEM and EDR tools. You will develop SOAR playbooks, perform threat modelling with STRIDE and ATT&CK, and integrate threat intelligence across cloud and on-prem environments.

The role emphasizes AI security monitoring, incident response support, and collaboration within ITIL/Agile workflows. Remote-ready with Baseline clearance preferred.

Qualifications

• Experience developing detection content across at least two enterprise SIEM platforms (e.g. Splunk, Microsoft Sentinel, QRadar, Elastic).
• Experience developing detections across SIEM, SOAR and EDR platforms, including incident response automation and playbook development.
• Practical threat modelling using STRIDE, ATT&CK or similar methodologies and translating outcomes into detection requirements.
• Experience integrating threat intelligence feeds and monitoring AI security risks within enterprise environments.
• Minimum five years' experience in cyber security operations or related field.
• Familiarity with AI security frameworks and guidance (ASD/ACSC, NIST, MITRE ATLAS, OWASP LLM Top 10) and relevant certifications.

Responsibilities

• Develop detection use cases and content for SIEM/EDR platforms.
• Tune SIEM/EDR content and create SOAR playbooks to enable automated responses.
• Conduct threat modelling using STRIDE and ATT&CK to inform detections.
• Integrate threat intelligence and monitor AI-related security risks.
• Collaborate with ITIL/AGILE teams and support incident response activities.
• Monitor cloud and on-prem environments for security events.
• Evaluate and monitor AI security controls for platforms like Microsoft Copilot or Azure AI.

Skills

Threat detection

SIEM engineering

SOAR

Threat modelling

MITRE ATT&CK

AI security

Threat intelligence

Incident response

Cloud/on-prem monitoring

Scripting (Python/Bash)

Tools

Microsoft Sentinel

Splunk

QRadar

CrowdStrike

Elastic

Job description

Powerdatagroup seeks a Threat Detection Engineer to design and implement detection content across SIEM and EDR tools. You will develop SOAR playbooks, perform threat modelling with STRIDE and ATT&CK, and integrate threat intelligence across cloud and on-prem environments.

The role emphasizes AI security monitoring, incident response support, and collaboration within ITIL/Agile workflows. Remote-ready with Baseline clearance preferred.