Security Operations Engineer

Brennan; Sydney; Hybrid; AUD 90,000 - 130,000; Full time

Benefits offered by this job

Training bonuses

Culture Awards

Brennan Daredevils trip

Social activities

Hardware discounts

Learning & development

Job summary

Brennan is seeking a Security Operations Engineer (L2) to join its Cyber Security team in Australia. The role sits in the Security Operations Centre, balancing incident response with security platform engineering.

You will onboard customers, configure security platforms, and build automations while acting as an escalation point for analysts. The position requires Australian citizenship and NV1 clearance eligibility, with a hybrid pattern (3 days in office).

Qualifications

• Australian citizenship required and NV1 security clearance eligibility.
• 2–3+ years in a SOC or related security role.
• Experience investigating and responding to security incidents.
• Strong troubleshooting and analytical skills.
• Experience with SIEM, SOAR, endpoint security and identity management.
• Excellent communication with technical and non‑technical stakeholders.
• Experience in operational support or managed services environments.
• Ability to work in a fast-paced team.
• Proactive learning and collaboration.

Responsibilities

• Act as an escalation point for Security Analysts and investigate incidents.
• Perform root cause analysis and troubleshooting across security tech.
• Configure, administer and optimise SIEM, SOAR, endpoint, identity tools.
• Onboard and transition customers onto managed security services.
• Build and maintain security automations and runbooks.
• Support cloud and identity security controls across platforms.
• Create runbooks and technical documentation.
• Collaborate with customers and internal teams for outcomes.
• Support platform upgrades, testing and continuous improvement.
• Participate in SOC on-call roster.

Skills

SOC experience

Incident response

Troubleshooting

SIEM/SOAR

Endpoint security

Identity management

Stakeholder comms

Operational support

Team collaboration

PowerShell

Python

Cloud security

Tools

Microsoft Sentinel

Microsoft Defender XDR

Securonix

SentinelOne

CrowdStrike

Mimecast

Check Point Harmony

Entra ID

Azure security

AWS security

PowerShell

Python

Job description

Brennan. Where true performance thrives.

At Brennan, we believe thathowtechnology is delivered is every bit as important aswhatthe technology is. We focus on creating real and relevant value for customers with solutions that fit their specific needs and always reflect their true interests. It’s a claim backed by ourTrue Performance System– a way of working engineered to get us closer, and deliver better, for our customers and their actual experience of technology.

Why join Brennan

True performance for our customers starts with a true belief in our people.
It’s why we’ve structured our business to help our teams, and their talents, shine bright. It's why we’ve created a workplace where people of all backgrounds, beliefs and experiences are welcomed and empowered. And it’s why we’ve built an organisation where real innovation makes a genuine impact and generates true rewards for our team members.

True rewards

In addition to competitive remuneration, Brennan offers extensive benefits, including:

• Training and certification bonuses
• Culture Awards that recognise excellence
• Brennan Daredevils – our annual, all-expenses paid trip awarded to our top performers and outstanding contributors
• Vibrant, fun social activities
• Discounted hardware and software
• An environment that embraces learning and development

The role:

We are looking for a Security Operations Engineer (L2) to join our Cyber Security team. This is an excellent opportunity for an experienced cyber security professional looking to take the next step in their career. Working within our Security Operations Centre (SOC), you will play a key role in protecting a range of sovereign and government-focused customers while helping to build, maintain and improve the security platforms that support our managed security services.

This role offers a balance of operational and engineering responsibilities. Approximately 50% of your time will be spent acting as an escalation point for Security Analysts, investigating and resolving complex security incidents and platform issues. The remaining 50% will focus on engineering activities across our security platforms, including customer onboarding, configuration, optimisation, automation and continuous improvement.

This can be in any of our Brennan offices in Australia. It is 3 days a week in the office however if we have more NV1 work, this may be higher as needed due to the requirements. Standard business hours apply, with participation in a secondary on-call roster as required.

Please note: Applicants must be Australian Citizens and eligible to obtain NV1 Security Clearance.

Key Responsibilities:

• Act as an escalation point for Security Analysts and investigate complex security incidents and platform issues
• Perform root cause analysis and troubleshooting across multiple security technologies
• Configure, administer and optimise SIEM, SOAR, endpoint, email, identity and vulnerability management platforms
• Onboard and transition customers onto managed security services, including log collection, agent deployment and platform configuration
• Build and maintain security automations, integrations and operational processes
• Implement and support identity, access and cloud security controls
• Create and maintain runbooks, standard operating procedures and technical documentation
• Work closely with customers and internal teams to deliver high-quality security outcomes
• Support platform upgrades, tuning, testing and continuous improvement initiatives
• Participate in the SOC secondary on-call roster

What skills and experience you bring:

• Australian Citizenship and eligibility to obtain NV1 Security Clearance
• 2-3+ years' experience in a Security Operations Centre (SOC), cyber security engineering or related security role
• Experience investigating and responding to security incidents
• Strong troubleshooting, analytical and root cause analysis skills
• Experience working with SIEM, SOAR, endpoint security and identity management platforms
• Strong communication skills with the ability to engage both technical and non-technical stakeholders
• Experience working within operational support, change management or managed services environments
• Ability to work effectively in a fast-paced team environment
• A proactive approach to learning, collaboration and continuous improvement

Technical skills in some of the following areas is beneficial:

• Microsoft Sentinel and Microsoft Defender XDR
• Securonix
• SentinelOne and CrowdStrike
• Mimecast and Check Point Harmony
• Entra ID, Conditional Access and Multi-Factor Authentication (MFA)
• Azure or AWS security services
• Tenable and vulnerability management platforms
• Security incident response, threat investigation and root cause analysis
• Security automation, SOAR and API integrations
• PowerShell and Python scripting
• Microsoft SC-200 Security Operations Analyst Associate (highly regarded)
• Security+, CySA+, SC-300, AZ-500 or other relevant cyber security certifications

Note:

As part of our hiring process, you will be required to undertake a National Criminal History Check.

Brennanis an equal-opportunity employer