Security Engineer: Sentinel & SIEM | Hybrid Govt Contract

Harrison McMillan Pty Ltd; Canberra; Hybrid; AUD 110,000 - 160,000; Full time

Benefits offered by this job

Hybrid work arrangements

Job summary

Harrison McMillan is seeking an experienced Security Engineer to support cybersecurity operations, Microsoft Sentinel, and security tooling within a federal government environment in Australia. The role is a 12-month contract with potential extensions and hybrid work arrangements in ACT.

The successful candidate will hold baseline security clearance and be capable of obtaining Negative Vetting Level 1, with responsibility for SIEM configuration, alerting, playbooks, and tooling administration

Qualifications

• Minimum 5 years' experience with Microsoft security technologies including Sentinel, Intune, Entra AD, Purview and Microsoft 365.
• Proven experience maintaining, operating, and automating SIEM technology.
• Experience implementing ISM controls, PSPF, and Essential Eight strategies.

Responsibilities

• Configure and troubleshoot log source integrations into Microsoft Sentinel and related SIEM platforms.
• Develop alerting rules, threat response playbooks, and KQL queries to support investigations and threat hunting.
• Administer and maintain cybersecurity tooling including SIEM, WAF, DLP, vulnerability scanners, proxy solutions, and application whitelisting.
• Support cyber uplift initiatives and ensure alignment with ISM, PSPF, and Essential Eight frameworks.
• Mentor junior team members and collaborate across business and government stakeholders.

Skills

Team collaboration

Mentoring juniors

Threat hunting

Security operations

Education

Industry certifications

Tools

Microsoft Sentinel

Intune

Entra Active Directory

Purview

Microsoft 365

SIEM

KQL

Job description

Harrison McMillan is seeking an experienced Security Engineer to support cybersecurity operations, Microsoft Sentinel, and security tooling within a federal government environment in Australia. The role is a 12-month contract with potential extensions and hybrid work arrangements in ACT.

The successful candidate will hold baseline security clearance and be capable of obtaining Negative Vetting Level 1, with responsibility for SIEM configuration, alerting, playbooks, and tooling administration