Security Logging Engineer - Microsoft Sentinel & Azure SIEM

Whizdom; Melbourne; On-site; AUD 129,000 - 203,000; Full time

Job summary

Whizdom in Melbourne is seeking a hands-on Security Logging Engineer/SIEM Consultant to design scalable logging, monitoring and detection capabilities. The role focuses on Microsoft Sentinel and Azure logging, working closely with platform teams and SOC stakeholders.

You will implement logging pipelines, configure collect rules, onboard Windows and Linux systems, and translate technical requirements into practical outcomes for enterprise security.

Qualifications

• Hands-on experience with Microsoft Sentinel and Log Analytics.
• Strong KQL skills for alerting and queries.
• Experience collecting logs from Windows, Linux, and network devices.
• Ability to translate requirements into measurable outcomes.

Responsibilities

• Design and implement logging solutions using Microsoft Sentinel and Azure Log Analytics.
• Configure data collection rules, workspaces and destination tables.
• Integrate logs via Azure Monitor Agent, Azure Arc, Windows Event Forwarding, Syslog and CEF.
• Onboard Windows, Linux and network devices.
• Define clear, testable requirements and acceptance criteria.
• Collaborate with delivery teams, platform owners and security operations.

Skills

MS Sentinel

Azure Log Analytics

KQL

Windows logging

Linux logging

Firewall logs

Log collection

Job description

Whizdom in Melbourne is seeking a hands-on Security Logging Engineer/SIEM Consultant to design scalable logging, monitoring and detection capabilities. The role focuses on Microsoft Sentinel and Azure logging, working closely with platform teams and SOC stakeholders.

You will implement logging pipelines, configure collect rules, onboard Windows and Linux systems, and translate technical requirements into practical outcomes for enterprise security.