Security Operations Engineer III – Remote, Cloud & SIEM

Jobgether; Australia; Remote; AUD 140,000 - 190,000; Full time

Benefits offered by this job

Remote work fully remote

Equity options

25 days PTO minimum

Coworking access

Team events and retreats

Equipment provided

Home office stipend

Learning budget

Private medical insurance

Professional onboarding support

Job summary

Jobgether is seeking a Security Engineer III - Security Operations based in Australia to own detection and response capabilities across cloud environments. You will build SIEM detections, automate responses with Python and no-code tools, and contribute to security maturity within a globally distributed team.

Responsibilities include triaging incidents, drafting runbooks, and supporting SOC compliance (SOC 2, PCI DSS) while leveraging Terraform and Python for tooling.

Qualifications

• Hands-on experience building, maintaining, and tuning SIEM detections.
• Experience with Elastic SIEM preferred; Splunk or similar platforms also relevant.
• Experience securing AWS environments and cloud-native detection/response.
• Proficiency in Python for scripting and tooling.
• Experience with Terraform or other IaC technologies.
• Knowledge of MITRE ATT&CK framework and its application.
• Experience triaging, investigating, and resolving incidents.
• Strong written communication for documenting investigations and risk decisions.
• Ability to work independently and own assigned responsibilities.
• Willingness to participate in an on-call rotation.

Responsibilities

• Plan and deliver end-to-end detection and response initiatives from rules to automated workflows.
• Build, tune, and maintain detections across Elastic SIEM and AWS environments.
• Manage the security investigation queue: triage alerts, investigate activity, escalate when needed.
• Document investigations and findings to support follow-up actions and knowledge sharing.
• Develop runbooks and automation workflows using Python and no-code tools to reduce manual work.
• Make risk decisions within your area and escalate when external support is required.
• Support compliance by maintaining audit-ready security controls and evidence (SOC 2, PCI DSS).
• Use Terraform and Python to build and improve infrastructure supporting detections and tooling.
• Participate in on-call rotation for monitoring and incident response.
• Continuously improve detection coverage, investigation processes, and response efficiency.

Skills

SIEM detections

Elastic SIEM

AWS security

Python

No-code automation

Incident response

Terraform

MITRE ATT&CK

Documentation

On-call readiness

Tools

Elastic SIEM

AWS

Zapier

Tines

Terraform

Job description

Jobgether is seeking a Security Engineer III - Security Operations based in Australia to own detection and response capabilities across cloud environments. You will build SIEM detections, automate responses with Python and no-code tools, and contribute to security maturity within a globally distributed team.

Responsibilities include triaging incidents, drafting runbooks, and supporting SOC compliance (SOC 2, PCI DSS) while leveraging Terraform and Python for tooling.