Senior Cyber Threat Detection Engineer

Informatech Pty Ltd; Australian Capital Territory; On-site; AUD 120,000 - 160,000; Full time

Benefits offered by this job

PD allowance

Training leave

Health and wellbeing allowance

Diverse client exposure

Job summary

Informatech Pty Ltd is recruiting for a permanent detection engineering role within a Federal Government cyber security team. You will develop detection content across SIEM, SOAR and EDR while collaborating with Cyber Defence Analysts to strengthen the SOC.

The role requires extensive experience in enterprise SIEM platforms and threat modelling, with a focus on AI-related security risks and timely incident support across multiple sites and environments.

Qualifications

• Five or more years of cyber security operations experience.
• Experience building detection content across SIEM/SOAR/EDR platforms.
• Familiarity with threat modelling and cyber threat intelligence lifecycle.

Responsibilities

• Develop detection content across enterprise SIEMs including Splunk, Sentinel, QRadar and Elastic.
• Implement detections across SIEM, SOAR and EDR with automation and playbooks.
• Model threats and analyze attack paths using STRIDE and ATT&CK frameworks.
• Monitor AI-related security risks in platforms like Copilot or Azure AI.
• Maintain and update threat intelligence integrations within the SOC stack.
• Support incident response and time-sensitive operations as directed.

Skills

Cyber security operations

Threat modeling

Detection engineering

Stakeholder engagement

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

SOAR

EDR

Job description

Informatech Pty Ltd is recruiting for a permanent detection engineering role within a Federal Government cyber security team. You will develop detection content across SIEM, SOAR and EDR while collaborating with Cyber Defence Analysts to strengthen the SOC.

The role requires extensive experience in enterprise SIEM platforms and threat modelling, with a focus on AI-related security risks and timely incident support across multiple sites and environments.