Security Platform Engineer: SIEM/SOAR & Telemetry

The HR Ally; Sydney; On-site; AUD 150,000 - 190,000; Full time

Job summary

The HR Ally seeks a Security Platform Engineer to operate and enhance telemetry platforms with a focus on Google SecOps SIEM/SOAR and BindPlane. You will ensure reliable ingestion, platform stability, and timely delivery of data for detection, response, and threat hunting.

Collaborate with SOC, cloud, and security teams to design scalable pipelines, automate deployments, and maintain documentation and runbooks. Experience with Python and Terraform is preferred.

Qualifications

• Hands-on experience with Google SecOps SIEM/SOAR.
• Experience with BindPlane or similar telemetry ingestion technologies.
• Strong understanding of log formats, schemas, parsing, enrichment, and data routing.
• Familiarity with cloud environments (GCP, AWS, Azure).
• Experience troubleshooting data ingestion pipelines and performance issues.
• Ability to read and modify basic Python and Terraform code.
• Experience with CI/CD pipelines and automated deployments.
• Strong incident support and cross-team collaboration skills.

Responsibilities

• Configure, administer, and maintain Google SecOps SIEM and SOAR environments.
• Operate health, performance, availability, and capacity of SIEM and SOAR platforms.
• Implement platform configuration changes, upgrades, and feature enhancements.
• Troubleshoot platform stability, integrations, and data ingestion.
• Support detection enablement, platform access requests, and data queries.
• Configure and manage BindPlane collectors, agents, and data pipelines.
• Oversee log and telemetry ingestion from cloud services, infrastructure, apps, and tools.
• Design and maintain parsing, normalisation, enrichment, routing, and delivery pipelines.
• Route telemetry to downstream platforms like Google SecOps SIEM and BigQuery.
• Monitor throughput, latency, error rates, data loss, and pipeline health.
• Troubleshoot ingestion failures, parsing errors, and schema mismatches.
• Design scalable, resilient telemetry ingestion architectures.
• Validate data quality and delivery guarantees for analytics use cases.
• Maintain architecture diagrams, pipeline docs, runbooks, and knowledge bases.
• Deploy platform updates via CI/CD pipelines.
• Read/modify Python and Terraform code for minor fixes or enhancements.
• Integrate platform tasks into automated deployment and validation processes.
• Provide platform-level support during security incidents and investigations.
• Assist SOC and IR teams with telemetry validation and troubleshooting.
• Collaborate with cloud engineering, infrastructure, DevOps, and security teams to improve reliability.

Skills

Google SecOps SIEM/SOAR

BindPlane

Log parsing/normalisation

Cloud platforms (GCP/AWS/AZURE)

Python

Terraform

CI/CD tooling

Incident response support

Cross-team collaboration

Tools

BindPlane

Job description

The HR Ally seeks a Security Platform Engineer to operate and enhance telemetry platforms with a focus on Google SecOps SIEM/SOAR and BindPlane. You will ensure reliable ingestion, platform stability, and timely delivery of data for detection, response, and threat hunting.

Collaborate with SOC, cloud, and security teams to design scalable pipelines, automate deployments, and maintain documentation and runbooks. Experience with Python and Terraform is preferred.