Security Ops Engineer: Threat Hunting & Incident Response

Calleo; Melbourne; Hybrid; AUD 83,000 - 124,000; Full time

Benefits offered by this job

Long term contract

Federal Government Contract

Hybrid working arrangements

Great Hourly Rates

Job summary

Calleo in Melbourne is seeking a Security Operations Engineer/Specialist to join a forward-thinking team protecting sensitive information and systems. You will monitor, detect, and respond to cyber threats using platforms including Microsoft Sentinel and Defender, and develop detection use cases to counter evolving threats.

You will lead investigations, containment, eradication, and recovery efforts, analyse logs across enterprise and cloud environments, and contribute to automation and

Qualifications

• Hands-on experience in security monitoring, incident response, threat analysis, and investigations in enterprise or cloud environments.
• Proficiency in incident detection and response, including triaging alerts, investigating events, and root cause analysis.

Responsibilities

• Monitor and optimize security monitoring platforms, develop analytics rules, and create dashboards to detect malicious activity.
• Lead investigations, containment, eradication, and recovery efforts for cyber security incidents.
• Analyse logs across enterprise and cloud environments, triaging incidents by risk and impact.
• Develop and maintain automation playbooks and scripts to enhance security operations efficiency.
• Assess and prioritise vulnerabilities, collaborating with DevOps to ensure timely remediation.
• Incorporate threat intelligence into detection use cases and hunting activities.
• Collaborate with development and DevOps to strengthen detection through system design.

Skills

Security monitoring

Incident response

Threat analysis

Azure Cloud

KQL queries

Automation scripting

Threat hunting

SOAR platforms

Security operations

Tools

Microsoft Sentinel

Microsoft Defender

SIEM/SOAR

Job description

Calleo in Melbourne is seeking a Security Operations Engineer/Specialist to join a forward-thinking team protecting sensitive information and systems. You will monitor, detect, and respond to cyber threats using platforms including Microsoft Sentinel and Defender, and develop detection use cases to counter evolving threats.

You will lead investigations, containment, eradication, and recovery efforts, analyse logs across enterprise and cloud environments, and contribute to automation and