Senior Engineer Threat Operations

ASIC; Melbourne; Hybrid; AUD 154,000 - 171,000; Full time

Benefits offered by this job

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Assistance for study and professional 

development

Job summary

ASIC's Cyber Security Group is looking for a Senior Engineer to join Threat Operations (SOC). The role leads incident response, threat detection and hunting, collaborating with diverse teams to investigate complex threats and strengthen detection, automation and intelligence use across Microsoft Sentinel/Defender.

You will shape detections, playbooks, telemetry integration, and advanced queries (KQL), providing senior leadership during incidents and advancing defensive AI initiatives within a

Qualifications

• A tertiary qualification in cyber security or related discipline, and/or equivalent professional experience.
• Demonstrated experience in senior Threat Operations, Incident Response, Threat Hunting or similar cyber security role.
• Significant experience with Microsoft security technologies (Sentinel/Defender).
• Experience analysing telemetry across sources to identify indicators of compromise.
• Operationalising cyber threat intelligence for detection, hunting and incident response.
• Security automation and orchestration using APIs, scripting and automated workflows.
• Exposure to AI or generative AI in defensive cyber security use cases.

Responsibilities

• Develop, optimise and maintain threat detections, security analytics and response playbooks across monitoring platforms including Microsoft Sentinel and Defender.
• Configure, integrate and troubleshoot security telemetry and log sources to enable monitoring and incident response.
• Develop advanced queries (e.g., KQL) to support investigations and proactive threat hunting.
• Provide senior technical leadership during cyber incidents, guiding containment, response and recovery.
• Operationalise cyber threat intelligence to improve detection, hunting and response.
• Develop security automation and orchestration using Logic Apps, scripting and APIs to improve efficiency and scalability.

Skills

Threat Operations

Incident Response

Threat Detection

Threat Hunting

Automation & Orchestration

APIs & Scripting

AI in cybersecurity

Education

Cyber security degree or related discipline

Tools

Microsoft Sentinel

Microsoft Defender

PowerShell

Job description

At ASIC, you can be the change that ensures a fair, strong and efficient financial system for the benefit of all Australians. Contribute to delivering on ASIC's purpose, vision, and strategic priorities to help maintain the integrity of the financial system and protect consumers from harm.

ASIC's Cyber Security Group is seeking a skilled and Senior Engineer Threat Operations to join their Cyber Security Operations Centre team.

• All ASIC office locations considered
• 24 Month Fixed Term Position
• Salary from $154,355 to $170,686 (depending on experience) + 15.4 % superannuation
• Applications will close at 11:59pm AEDT, Sunday 15 November 2026

The team

ASIC's Cyber Security team delivers services that safeguard the organisation's digital environment, including threat monitoring, incident response, security architecture and cyber assurance. We are a collaborative and inclusive team that values different perspectives, respectful challenge and shared learning. Together, we protect ASIC's systems and data, strengthen resilience to cyber threats and support ASIC's regulatory mission.

The role

As a Senior Engineer in Cyber's Threat Operations (SOC) team, you will provide technical leadership across incident response, threat detection and threat hunting. Working with colleagues and stakeholders from a range of technical and non-technical backgrounds, you will investigate complex threats, enhance detection and automation capabilities and operationalise actionable threat intelligence. You will also support the responsible and inclusive adoption of emerging technologies, including defensive AI, to strengthen Threat Operations.

More specifically, you will:

• Develop, optimise and maintain threat detections, security analytics and response playbooks across ASIC's security monitoring platforms, including Microsoft Sentinel and Defender.
• Configure, integrate and troubleshoot security telemetry and log sources to enable effective monitoring, investigation and incident response.
• Develop and apply advanced queries, including KQL to support cyber investigations, proactive threat hunting and the identification of anomalous or malicious activity.
• Provide senior technical leadership during cyber incidents, leading complex investigations and supporting effective containment, response and recovery activities.
• Operationalise cyber threat intelligence to strengthen detection engineering, threat hunting, incident response and broader defensive priorities.
• Develop and enhance security automation and orchestration using technologies such as Logic Apps, scripting and APIs to improve the efficiency, consistency and scalability of Threat Operations.

About you

We are looking for an experienced cyber security professional who combines strong technical capability with curiosity, sound judgement and an inclusive, collaborative approach. You will bring expertise across Threat Operations, incident response, threat detection or threat hunting, together with experience using Microsoft security technologies, security telemetry and threat intelligence. You will be comfortable leading complex investigations, sharing knowledge and working respectfully with people who bring different disciplines, experiences and perspectives. We value transferable skills and encourage you to apply even if you do not meet every requirement, provided you can demonstrate strong relevant cyber security experience and capability.

In addition, you will have:

• A tertiary qualification in cyber security or a related discipline, and/or equivalent professional experience, with demonstrated experience in a senior Threat Operations (SOC), Incident Response, Threat Hunting or similar technical cyber security role.
• Demonstrated knowledge and experience in cyber incident response, including the investigation, containment, remediation and resolution of complex cyber security incidents.
• Significant experience with Microsoft security technologies, preferably including Microsoft Sentinel, Microsoft Defender and associated security capabilities.
• Previous experience analysing and correlating security telemetry across multiple sources to identify indicators of compromise, adversary behaviours and potential security weaknesses.
• Demonstrated experience applying and operationalising cyber threat intelligence to inform threat detection, threat hunting, investigations and incident response activities.
• Strong knowledge and practical experience in security automation and orchestration, including the use of APIs, scripting and automated workflows to improve operational efficiency and response capability.
• Demonstrated exposure to artificial intelligence or generative AI capabilities in defensive cyber security use cases.

About ASIC

ASIC's remit is one of the broadest of regulators across the world. ASIC regulates corporations, markets, financial services and consumer credit and monitors and promotes market integrity and consumer protection in the Australian financial system. Through our enforcement work, we hold to account those who contravene the law, working to achieve strong outcomes that address the greatest consumer and investor harms.

ASIC is an equal opportunity employer seeking people who want to make a difference. ASIC is committed to a diverse and inclusive workplace where the very best talent in Australia chooses to work. Applications from people of all ages, cultural backgrounds, abilities, LGBTIQ+ identity, and people of Aboriginal and Torres Strait Islander descent are encouraged to apply.

We offer a rangeemployee benefitsincluding:

• Attractive superannuation
• Additional leave entitlements
• 50/50 hybrid work-from home model
• Assistance for study and professional development

To read more about ASIC, you can visit ourwebsiteor review ourCorporate Plan.

To work with us, you need to be an Australian citizen and be prepared to complete an ASIC Suitability and Baseline Assessment.