Remote SOC Detection Engineer - SIEM & AI Security

Powerdata Group Consulting; Canberra; Hybrid; AUD 120,000 - 150,000; Full time

Job summary

Powerdata Group Consulting is seeking an experienced Threat Detection Engineer to design and tune SIEM/EDR detections and SOAR playbooks. You will apply STRIDE and MITRE ATT&CK frameworks to identify detection gaps and drive incident response readiness.

The role requires five+ years in SOC/Threat Hunting with hands-on experience across Splunk, Sentinel, QRadar, and EDR platforms, plus scripting skills in Python and Bash. Remote-friendly in Canberra area under Baseline Clearance considerations.

Qualifications

• Demonstrated experience developing detection content across at least two enterprise SIEM platforms.
• Experience developing detections across SIEM, SOAR and EDR platforms, including IR automation.
• Practical threat modelling using STRIDE, ATT&CK and related methodologies.
• Experience integrating threat intelligence feeds into security operations and monitoring.
• Minimum five years in cyber security operations, SOC, detection engineering or threat hunting.
• Familiarity with AI security frameworks and monitoring for AI platforms.

Responsibilities

• Develop SIEM use cases and detection content.
• Tune detection rules and establish coverage.
• Create and maintain SOAR playbooks.
• Perform threat modelling using STRIDE and ATT&CK.
• Integrate threat intelligence and monitor AI security risks.
• Support incident response activities and analytics.
• Monitor security of cloud and on-prem environments.
• Collaborate with ITIL and Agile teams.

Skills

Threat detection engineering

SIEM use case development

Detection rule development

SOAR playbooks

STRIDE

MITRE ATT&CK

Threat intelligence integration

AI security monitoring

Incident response

Python scripting

Bash scripting

EDR & cloud/on-prem monitoring

Threat modelling

Cloud and on-premises security

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

CrowdStrike

Microsoft Defender for Endpoint

Carbon Black

Job description

Powerdata Group Consulting is seeking an experienced Threat Detection Engineer to design and tune SIEM/EDR detections and SOAR playbooks. You will apply STRIDE and MITRE ATT&CK frameworks to identify detection gaps and drive incident response readiness.

The role requires five+ years in SOC/Threat Hunting with hands-on experience across Splunk, Sentinel, QRadar, and EDR platforms, plus scripting skills in Python and Bash. Remote-friendly in Canberra area under Baseline Clearance considerations.