Senior Engineer Threat Operations

Australian Securities and Investments Commission; Australia; On-site; AUD 154,000 - 171,000; Full time

Job summary

ASIC's Cyber Security Operations Centre seeks a Senior Engineer Threat Operations to lead incident response, threat detection and hunting. You will enhance detections, configure telemetry, and drive automation using Logic Apps, scripting, and APIs.

With expertise in Microsoft Sentinel and Defender, you will guide investigations, apply threat intelligence, and mentor peers while supporting defensive AI initiatives across the SOC.

Qualifications

• Tertiary qualification in cyber security or related discipline, with senior SOC experience.
• Experience in cyber incident response, containment, remediation and resolution of complex incidents.
• Strong knowledge of Microsoft security technologies (Sentinel, Defender) and telemetry sources.

Responsibilities

• Develop, optimise and maintain threat detections, security analytics and response playbooks.
• Configure, integrate and troubleshoot security telemetry and log sources.
• Develop advanced queries (KQL) for investigations and threat hunting.
• Lead investigations during cyber incidents and support containment and recovery.
• Operationalise threat intelligence to strengthen detection and response capabilities.
• Advance security automation and orchestration using APIs, scripting and Logic Apps.

Skills

Threat operations

Incident response

Threat hunting

Threat detection

Security telemetry analysis

KQL

Automation & orchestration

APIs

Scripting

Microsoft security technologies

Education

Cyber security qualification

Tools

Microsoft Sentinel

Microsoft Defender

Logic Apps

Job description

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.ASIC's Cyber Security Group is seeking a skilled and Senior Engineer Threat Operations to join their Cyber Security Operations Centre team.All ASIC office locations considered24 Month Fixed Term PositionSalary from $154,355 to $170,686 (depending on experience) + 15.4 % superannuationApplications will close at 11:59pm AEDT, Sunday 15 November 2026The teamASIC's Cyber Security team delivers services that safeguard the organisation's digital environment, including threat monitoring, incident response, security architecture and cyber assurance. We are a collaborative and inclusive team that values different perspectives, respectful challenge and shared learning. Together, we protect ASIC's systems and data, strengthen resilience to cyber threats and support ASIC's regulatory mission.The roleAs a Senior Engineer in Cyber's Threat Operations (SOC) team, you will provide technical leadership across incident response, threat detection and threat hunting. Working with colleagues and stakeholders from a range of technical and non-technical backgrounds, you will investigate complex threats, enhance detection and automation capabilities and operationalise actionable threat intelligence. You will also support the responsible and inclusive adoption of emerging technologies, including defensive AI, to strengthen Threat Operations.More specifically, you will:Develop, optimise and maintain threat detections, security analytics and response playbooks across ASIC's security monitoring platforms, including Microsoft Sentinel and Defender.Configure, integrate and troubleshoot security telemetry and log sources to enable effective monitoring, investigation and incident response.Develop and apply advanced queries, including KQL to support cyber investigations, proactive threat hunting and the identification of anomalous or malicious activity.Provide senior technical leadership during cyber incidents, leading complex investigations and supporting effective containment, response and recovery activities.Operationalise cyber threat intelligence to strengthen detection engineering, threat hunting, incident response and broader defensive priorities.Develop and enhance security automation and orchestration using technologies such as Logic Apps, scripting and APIs to improve the efficiency, consistency and scalability of Threat Operations.About youWe are looking for an experienced cyber security professional who combines strong technical capability with curiosity, sound judgement and an inclusive, collaborative approach. You will bring expertise across Threat Operations, incident response, threat detection or threat hunting, together with experience using Microsoft security technologies, security telemetry and threat intelligence. You will be comfortable leading complex investigations, sharing knowledge and working respectfully with people who bring different disciplines, experiences and perspectives. We value transferable skills and encourage you to apply even if you do not meet every requirement, provided you can demonstrate strong relevant cyber security experience and capability.In addition, you will have:A tertiary qualification in cyber security or a related discipline, and/or equivalent professional experience, with demonstrated experience in a senior Threat Operations (SOC), Incident Response, Threat Hunting or similar technical cyber security role.Demonstrated knowledge and experience in cyber incident response, including the investigation, containment, remediation and resolution of complex cyber security incidents.Significant experience with Microsoft security technologies, preferably including Microsoft Sentinel, Microsoft Defender and associated security capabilities.Previous experience analysing and correlating security telemetry across multiple sources to identify indicators of compromise, adversary behaviours and potential security weaknesses.Demonstrated experience applying and operationalising cyber threat intelligence to inform threat detection, threat hunting, investigations and incident response activities.Strong knowledge and practical experience in security automation and orchestration, including the use of APIs, scripting and automated workflows to improve operational efficiency and response capability.Demonstrated exposure to artificial intelligence or generative AI capabilities in defensive cyber security use cases.Click `apply' to start your application. Applications will close at 11:59pm AEDT, Sunday 15 November 2026.About ASICASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.We offer a range of employee benefits including:Attractive superannuationAdditional leave entitlements50/50 hybrid work-from home modelFlexible work arrangementsAssistance for study and professional developmentClick here to view ASIC's salary and benefits guide.To read more about ASIC, you can visit our website or review our Corporate Plan.To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment.