Senior Security Engineer

Kinetic IT; Perth; Hybrid; AUD 130,000 - 190,000; Full time

Benefits offered by this job

Hybrid work

Flexible hours

Wellbeing resources

Employee discounts

Team events

Job summary

Kinetic IT is seeking an experienced Senior Security Engineer in East Perth to lead complex cyber security investigations, perform advanced threat hunting, and drive incident response in a large enterprise environment.

You will mentor SOC staff, coordinate response activities, and continuously improve detection and response capabilities across the security stack, including Defender, Sentinel and Tenable.

Qualifications

• Proven track record managing complex environments.
• Experience with Sentinel, Defender or Tenable.
• Extensive vulnerability management experience.
• Excellent stakeholder and customer facing abilities.
• Comfortable mentoring junior staff.

Responsibilities

• Lead complex cyber security incident investigations from initial triage to resolution.
• Coordinate containment, eradication and recovery actions.
• Escalate actions beyond approved authority when needed.
• Lead advanced threat hunting and threat analysis to identify malicious activity.
• Develop and improve detection and response content.
• Provide guidance to SOC teams and perform post‑incident reviews.
• Preserve evidence and support investigation integrity.

Skills

Incident response

Threat hunting

Stakeholder mgmt

Mentoring juniors

Customer facing

Security investigations

Tools

Microsoft Sentinel

Microsoft Defender

Tenable

Job description

Working for one of our larger Enterprise based accounts in East Perth. Kinetic IT is seeking an experienced Senior Security Engineer to lead complex cyber security incident investigations, advanced threat hunting and technical incident response within a large, complex enterprise environment.

Responsibilities will include:

• Lead complex cyber incident investigations, coordinating technical analysis and response activities from initial investigation through to resolution.
• Lead authorised incident containment, eradication and recovery activities, ensuring actions remain within approved operational authority.
• Escalate response actions that exceed approved authority or may impact critical services or material business operations.
• Coordinate technical cyber security response activities with the Security Operations Manager and Major Incident Manager.
• Lead advanced threat hunting and technical threat analysis to identify malicious activity, investigate suspicious behaviour and uncover potential threats.
• Define and develop operational detection requirements and detection content to improve threat identification and response effectiveness.
• Coordinate the implementation of detection and response capabilities with Cyber Security Platform Engineering.
• Maintain and enhance Cyber Security Operations incident response playbooks, ensuring procedures remain effective and aligned with operational requirements.
• Provide technical guidance, mentoring and escalation support to SOC Level 1 and Level 2 personnel.
• Lead post-incident technical reviews, identifying root causes, lessons learned and opportunities to improve security controls and response processes.
• Perform first-response evidence preservation within approved capabilities, supporting investigation integrity and subsequent analysis.
• Assess and recommend exceptional or potentially disruptive response actions for appropriate approval before execution.
• Provide evidence-based incident closure recommendations to the Customer, supported by technical findings, investigation outcomes and recovery validation.

Technical Environment

• Microsoft Sentinel - SIEM monitoring, detection engineering and incident investigation.
• Microsoft Defender - Threat investigation, endpoint security and incident response.
• Tenable - Vulnerability management, exposure assessment and remediation prioritisation.
• Vulnerability and Exposure Management

What you’ll bring to the table:

• Proven track record managing complex environments
• Experience with Sentinel, Tenable or Defender
• Extensive vulnerability management
• Excellent stakeholder and customer facing abilities
• Comfortable mentoring junior members of staff

About Kinetic IT

Kinetic IT is a leading Australian IT services provider specialising in Intelligent Workplace, Cloud, Cyber Security, Digital Infrastructure and IT Service Management. We are unlocking the potential of technology to enrich lives of Australian communities. For more than 25 years, we've partnered with some of Australia's most important organisations, helping them deliver essential services relied upon by our communities including government, critical infrastructure, education, law enforcement, defence, emergency services, utilities, and transport.

Be You, Create the Future. At Kinetic IT, we're driven by a shared passion for technology, customer success, and community impact.

With over 1,500 talented people working across Australia, we deliver world-class capabilities with a local touch - helping shape the future of tech, here and beyond. We value individuality and foster an inclusive culture where you're safe to be your best, real self. We tackle challenges together, celebrate success together, and make sure everyone feels valued, supported, and proud of the work they do.

The Kinetic IT Difference

• Growth-focused culture - Formal training, mentoring, vendor exam support, communities of practice and regular development reviews.
• Advance your career - Access new roles via our internal 'Opportunity Marketplace' careers hub.
• Flex your work - Hybrid options, flexible hours, mobility and part-time roles (customer needs permitting).
• Celebrate together - Social events, cultural celebrations, end-of-year functions and more.
• Wellbeing matters - Health and wellness resources, tailored leave and support options and EAP access.
• Other Perks - Access to our employee discounts platform, discounted gym membership and more.