Senior Cyber Threat Detection Engineer

Talenza; Sydney; Presencial; AUD 150.000 - 190.000; Jornada completa

Descripción de la vacante

Talenza is seeking a Senior Cyber Security Engineer in Sydney to mature enterprise detection capabilities and enhance security monitoring. You will develop high-quality detections, conduct threat hunting and work with SOC, IR and Threat Intelligence teams to reduce cyber risk.

Responsibilities include designing detections across SIEM/EDR/XDR, translating intel into content, and validating detections through simulations. Strong experience with MITRE ATT&CK and scripting is required.

Formación

• Extensive experience in designing and maturing enterprise detection content.
• Hands-on knowledge of SIEM, EDR and XDR platforms and detection development.
• Strong understanding of MITRE ATT&CK and modern adversary techniques.

Responsabilidades

• Design and develop threat detections across SIEM, EDR and XDR platforms.
• Create detection use cases aligned to adversary TTPs and MITRE ATT&CK.
• Conduct threat hunting to identify new threats and gaps in detections.
• Translate threat intelligence into actionable detection content.
• Tune rules to improve accuracy and reduce false positives.
• Collaborate with Incident Response to derive detections from incidents.
• Validate detections through attack simulations and testing.
• Implement automation and SOAR capabilities to improve SOC efficiency.
• Identify monitoring gaps and improve visibility across cloud, endpoint, identity and network.
• Develop reporting and metrics to measure detection effectiveness.

Conocimientos

Detection engineering

Security operations

Security analytics

Threat hunting

MITRE ATT&CK

Incident response

Python

PowerShell

KQL

Herramientas

Microsoft Sentinel

Splunk

QRadar

Elastic

Descripción del empleo

Talenza is seeking a Senior Cyber Security Engineer in Sydney to mature enterprise detection capabilities and enhance security monitoring. You will develop high-quality detections, conduct threat hunting and work with SOC, IR and Threat Intelligence teams to reduce cyber risk.

Responsibilities include designing detections across SIEM/EDR/XDR, translating intel into content, and validating detections through simulations. Strong experience with MITRE ATT&CK and scripting is required.