Senior Security Operations & SIEM Platform Lead

Revio Cyber Security; Sydney; On-site; AUD 180,000 - 240,000; Full time

Job summary

RGIT Australia is seeking a Senior Cyber Security Analyst to lead security operations across a multi-tenant client base. The role owns the SIEM/XDR platform and coordinates incident response, threat hunts and vulnerability management with end-to-end accountability.

You will work with Wazuh/OpenSearch, Terraform/Ansible, and cloud security in AWS and Azure, balancing engineering with client-facing governance and reporting to executives.

Qualifications

• A bachelor degree or higher in cyber security or related field.
• At least five years’ experience in security operations or security engineering in multi-client or multi-tenant environments.
• Proven SIEM engineering depth with hands-on deployment, tuning and operation (Wazuh/OpenSearch preferred).
• Demonstrated incident response capability including reconstructing attack chains and communicating findings to executives.
• Cloud security in AWS (IAM, KMS, Secrets management) and familiarity with Azure Entra ID.
• Infrastructure as code and automation using Terraform/Ansible; production-grade scripting in Python/Bash.
• Knowledge of ISO/IEC 27001 and audit cycles; strong documentation discipline.
• Excellent client-facing communication, written reporting and problem-solving skills.
• Desirable certifications such as GCIA, GCIH, CISSP, AWS Security – Specialty; MSSP/consultancy experience.

Responsibilities

• Perform daily client SOC triage, investigate alerts, and escalate across multi-tenant environments.
• Lead investigations on client security incidents, reconstruct attack chains and advise executives on remediation.
• Own the SIEM/XDR architecture and multi-tenant data plane with code-driven configuration and RBAC.
• Drive detection engineering, alert tuning, enrichment, risk-based alerting and threat hunts.
• Maintain endpoint agent control plane, including dual-credential failover, rollouts and secure signing.
• Lead SIEM onboarding programs: tenancy creation, agent deployment, log sources, SSO and integrations.
• Oversee vulnerability management, risk prioritization, patching SLAs and CVE response cycles.
• Support ISO/IEC 27001 and SOC 2-aligned controls, including access reviews and policy governance.
• Mentor junior analysts and maintain playbooks for consistent incident response.

Skills

SIEM engineering

Incident response

Cloud security

Infrastructure as code

Automation

Documentation

Client-facing

Threat hunting

Education

Bachelor's degree or higher in cyber security or related field

Tools

Wazuh

OpenSearch

Elastic

Microsoft Sentinel

Splunk

Terraform

Ansible

Job description

RGIT Australia is seeking a Senior Cyber Security Analyst to lead security operations across a multi-tenant client base. The role owns the SIEM/XDR platform and coordinates incident response, threat hunts and vulnerability management with end-to-end accountability.

You will work with Wazuh/OpenSearch, Terraform/Ansible, and cloud security in AWS and Azure, balancing engineering with client-facing governance and reporting to executives.