Senior Security Operations Engineer: Threat Hunting & IR

GoSourcing; Queensland; Hybrid; AUD 120,000 - 160,000; Full time

Job summary

GoSourcing seeks a Senior Security Operations Engineer/Specialist for a Federal Government client. The role is hands-on, focusing on monitoring, detection, and response to cyber threats using Microsoft Sentinel and Defender within hybrid work arrangements.

Start date is 28 September 2026, with a 12‑month initial contract, followed by a further 12 months and potentially two extensions. Location covers multiple states; office attendance is 2 days/week.

Qualifications

• Hands-on cyber security operations across enterprise or cloud environments.
• Experience with SIEM/SOAR platforms, preferably Microsoft Sentinel, incl. analytics rules and dashboards.
• Ability to detect, investigate and respond to security events and incidents.
• Automation and scripting to support security orchestration and response.
• Experience in Azure cloud logging, monitoring and security controls.
• Familiarity with WoAG policies such as ISM and Essential Eight controls.

Responsibilities

• Security Monitoring & Detection Engineering: develop analytics rules and dashboards to detect threats.
• Threat Hunting: perform proactive hunting using telemetry and threat intel.
• Incident Response: lead containment, eradication and recovery activities.
• Security Operations & Investigation: analyze events/logs; triage incidents by risk.
• Security Automation & Orchestration: build playbooks and scripts to speed responses.
• Vulnerability Management: identify and remediate vulnerabilities with DevOps teams.
• Threat Intelligence & Use Case Development: integrate intel into detections and hunts.
• Security Tool Management: tune and optimize security tools and integrations.
• Collaboration & Continuous Improvement: align with DevOps and design for better controls.
• Goverance Support & Documentation: maintain runbooks and WoAG evidence across processes.

Skills

Hands-on security operations

SIEM/SOAR (Microsoft Sentinel)

KQL queries

Incident detection & response

Security automation & scripting

Cloud (Azure)

WoAG policies (ISM/Essential Eight)

Tools

Microsoft Sentinel

Defender

Job description

GoSourcing seeks a Senior Security Operations Engineer/Specialist for a Federal Government client. The role is hands-on, focusing on monitoring, detection, and response to cyber threats using Microsoft Sentinel and Defender within hybrid work arrangements.

Start date is 28 September 2026, with a 12‑month initial contract, followed by a further 12 months and potentially two extensions. Location covers multiple states; office attendance is 2 days/week.