Senior Security Operations Specialist

Calleo; Melbourne; Hybrid; AUD 83,000 - 124,000; Full time

Benefits offered by this job

Long term contract

Federal Government Contract

Hybrid working arrangements

Great Hourly Rates

Job summary

Calleo in Melbourne is seeking a Security Operations Engineer/Specialist to join a forward-thinking team protecting sensitive information and systems. You will monitor, detect, and respond to cyber threats using platforms including Microsoft Sentinel and Defender, and develop detection use cases to counter evolving threats.

You will lead investigations, containment, eradication, and recovery efforts, analyse logs across enterprise and cloud environments, and contribute to automation and

Qualifications

• Hands-on experience in security monitoring, incident response, threat analysis, and investigations in enterprise or cloud environments.
• Proficiency in incident detection and response, including triaging alerts, investigating events, and root cause analysis.

Responsibilities

• Monitor and optimize security monitoring platforms, develop analytics rules, and create dashboards to detect malicious activity.
• Lead investigations, containment, eradication, and recovery efforts for cyber security incidents.
• Analyse logs across enterprise and cloud environments, triaging incidents by risk and impact.
• Develop and maintain automation playbooks and scripts to enhance security operations efficiency.
• Assess and prioritise vulnerabilities, collaborating with DevOps to ensure timely remediation.
• Incorporate threat intelligence into detection use cases and hunting activities.
• Collaborate with development and DevOps to strengthen detection through system design.

Skills

Security monitoring

Incident response

Threat analysis

Azure Cloud

KQL queries

Automation scripting

Threat hunting

SOAR platforms

Security operations

Tools

Microsoft Sentinel

Microsoft Defender

SIEM/SOAR

Job description

Overview

We are seeking a Security Operations Engineer/Specialist to join a forward-thinking team dedicated to protecting sensitive information and systems. We’re looking for a technical expert who thrives on actively monitoring, detecting, and responding to cyber threats while continuously improving detection and response capabilities. In this role, you will leverage platforms including Microsoft Sentinel and Defender, investigate security alerts, and develop detection use cases to address emerging threats. Your hands-on expertise will make a direct and significant impact on the organisation’s ability to prevent, detect, and respond to cyber incidents.

As a Security Operations Engineer/Specialist, you will:

• Monitor and Detect Threats: Configure and optimise security monitoring platforms, develop analytics rules, and create dashboards to detect malicious activity.
• Conduct Threat Hunting: Proactively identify and mitigate threats using telemetry and intelligence, refining detection capabilities to keep pace with evolving risks.
• Respond to Incidents: Lead investigations, containment, eradication, and recovery efforts for cyber security incidents, including root cause analysis and remediation.
• Perform Security Analysis: Analyse logs and alerts across enterprise and cloud environments, triaging and prioritising incidents based on risk and impact.
• Automate Responses: Develop and maintain automation playbooks and scripts to enhance security operations efficiency.
• Manage Vulnerabilities: Assess and prioritise vulnerabilities, collaborating with DevOps and development teams to ensure timely resolution.
• Utilise Threat Intelligence: Incorporate intelligence into detection use cases, analytics rules, and threat-hunting activities.
• Optimise Security Tools: Configure, maintain, and improve security tools and platforms while identifying opportunities for automation and integration.
• Collaborate and Improve: Work closely with development and DevOps teams to strengthen detection and response capabilities through system design enhancements.
• Support Governance: Maintain operational documentation and align activities with Whole-of-Australian-Government (WoAG) policies, including the ISM and Essential Eight.

Candidates with experience in the following skills and expereinces are encouraged to apply

• Hands-on experience in security monitoring, incident response, threat analysis, and investigations in enterprise or cloud environments.
• Expertise in working with SIEM/SOAR platforms, ideally Microsoft Sentinel, including the development of analytics rules, KQL queries, alert tuning, and dashboards.
• Proficiency in incident detection and response, including triaging alerts, investigating events, and performing root cause analysis.
• Experience with security automation and scripting to enhance orchestration and response activities.
• A strong understanding of cloud environments, preferably Microsoft Azure, with knowledge of logging, monitoring, and security controls.
• Familiarity with cyber security frameworks and best practices, including alignment with WoAG policies such as the ISM and Essential Eight.

Whats on Offer

• Long term contract with extension options
• Federal Government Contract
• Hybrid working arrangements
• Great Hourly Rates

Due to the nature of this role, this job is open to Australian Citizens with Negative Vetting 1 clearances or above

Calleo is an equal opportunity employer and we encourage applications from all people including Aboriginal and Torres Strait Islander peoples.