Security Operations Engineer

Brennan; Adelaide; Hybrid; AUD 120,000 - 150,000; Full time

Benefits offered by this job

Training and certification bonuses

Culture Awards

Brennan Daredevils trip

Social activities

Discounted hardware and software

Learning and development environment

Job summary

Brennan is seeking a Security Operations Engineer (L2) to join the Cyber Security team in Brisbane or Adelaide. The role mixes escalation duties with security platform engineering inside our SOC, protecting sovereign and government-focused clients.

Approximately half the time is spent escalating and resolving complex incidents, the other half on engineering activities including onboarding, configuration, and automation across our security platforms.

Qualifications

• Australian citizenship and NV1 security clearance are required.
• 2–3+ years in a SOC or security operations role.
• Experience investigating and responding to security incidents.
• Strong troubleshooting and root-cause analysis skills.
• Experience with SIEM/SOAR, endpoint security, and identity management platforms.
• Excellent written and verbal communication with stakeholders.

Responsibilities

• Act as escalation point for Security Analysts and investigate complex incidents.
• Perform root cause analysis across multiple security technologies.
• Configure, administer and optimise SIEM, SOAR, endpoint, identity and vulnerability platforms.
• Onboard customers to managed security services and configure platforms.
• Build and maintain security automations and integrations.
• Implement and support identity, access and cloud security controls.
• Create runbooks and technical documentation.
• Collaborate with customers and teams to deliver high-quality security outcomes.

Skills

Australian Citizenship

NV1 Security Clearance

SOC experience

Security incident response

Troubleshooting

Communication skills

Security automation

PowerShell / Python

Tools

Microsoft Sentinel

Microsoft Defender XDR

Securonix

SentinelOne

CrowdStrike

Mimecast

Check Point Harmony

Entra ID / MFA

Azure security services

Tenable

Job description

Brennan. Where true performance thrives.

At Brennan, we believe that how technology is delivered is every bit as important as what the technology is. We focus on creating real and relevant value for customers with solutions that fit their specific needs and always reflect their true interests. It’s a claim backed by our True Performance System - a way of working engineered to get us closer, and deliver better, for our customers and their actual experience of technology.

Why join Brennan

True performance for our customers starts with a true belief in our people.

It’s why we’ve structured our business to help our teams, and their talents, shine bright. It's why we’ve created a workplace where people of all backgrounds, beliefs and experiences are welcomed and empowered. And it’s why we’ve built an organisation where real innovation makes a genuine impact and generates true rewards for our team members.

True rewards

• Training and certification bonuses
• Culture Awards that recognise excellence
• Brennan Daredevils - our annual, all-expenses paid trip awarded to our top performers and outstanding contributors
• Vibrant, fun social activities
• Discounted hardware and software
• An environment that embraces learning and development

The role

We are looking for a Security Operations Engineer (L2) to join our Cyber Security team in Brisbane or Adelaide. This is an excellent opportunity for an experienced cyber security professional looking to take the next step in their career. Working within our Security Operations Centre (SOC), you will play a key role in protecting a range of sovereign and government-focused customers while helping to build, maintain and improve the security platforms that support our managed security services.

This role offers a balance of operational and engineering responsibilities. Approximately 50% of your time will be spent acting as an escalation point for Security Analysts, investigating and resolving complex security incidents and platform issues. The remaining 50% will focus on engineering activities across our security platforms, including customer onboarding, configuration, optimisation, automation and continuous improvement.

This is either a Brisbane or Adelaide based role, 3 days a week in the office however if we have more NV1 work, this may be higher as needed due to the requirements. Standard business hours apply, with participation in a secondary on-call roster as required.

Applicants must be Australian Citizens and eligible to obtain NV1 Security Clearance.

Key Responsibilities

• Act as an escalation point for Security Analysts and investigate complex security incidents and platform issues
• Perform root cause analysis and troubleshooting across multiple security technologies
• Configure, administer and optimise SIEM, SOAR, endpoint, email, identity and vulnerability management platforms
• Onboard and transition customers onto managed security services, including log collection, agent deployment and platform configuration
• Build and maintain security automations, integrations and operational processes
• Implement and support identity, access and cloud security controls
• Create and maintain runbooks, standard operating procedures and technical documentation
• Work closely with customers and internal teams to deliver high-quality security outcomesSupport platform upgrades, tuning, testing and continuous improvement initiatives
• Participate in the SOC secondary on-call roster

What skills and experience you bring

• Australian Citizenship and eligibility to obtain NV1 Security Clearance
• 2-3+ years' experience in a Security Operations Centre (SOC), cyber security engineering or related security role
• Experience investigating and responding to security incidents
• Strong troubleshooting, analytical and root cause analysis skills
• Experience working with SIEM, SOAR, endpoint security and identity management platforms
• Strong communication skills with the ability to engage both technical and non-technical stakeholders
• Experience working within operational support, change management or managed services environments
• Ability to work effectively in a fast-paced team environment
• A proactive approach to learning, collaboration and continuous improvement

Technical skills in some of the following areas is beneficial

• Microsoft Sentinel and Microsoft Defender XDR
• Securonix
• SentinelOne and CrowdStrike
• Mimecast and Check Point Harmony
• Entra ID, Conditional Access and Multi-Factor Authentication (MFA)
• Azure or AWS security services
• Tenable and vulnerability management platforms
• Security incident response, threat investigation and root cause analysis
• Security automation, SOAR and API integrations
• PowerShell and Python scripting
• Microsoft SC-200 Security Operations Analyst Associate (highly regarded)
• Security+, CySA+, SC-300, AZ-500 or other relevant cyber security certifications

Note

As part of our hiring process, you will be required to undertake a National Criminal History Check.

Brennan is an equal-opportunity employer