Senior SIEM Operations & Detection Engineer

Countersight; Canberra; On-site; AUD 100,000 - 180,000; Full time

Job summary

Countersight is a Canberra-based cybersecurity specialist delivering security research, capability development and consulting. We seek a Senior Cyber Security Operations Analyst (SIEM / Detection Engineering) to work hands-on with SIEM tooling, onboarding logs, tuning content, and optimising platform performance across client environments.

The role focuses on hands-on SIEM engineering, detecting events, and collaborating with client SOC teams to improve telemetry, data quality and detection

Qualifications

• 3+ years’ hands-on experience in SIEM engineering, SOC operations, or cyber security operations roles.
• Strong experience onboarding, parsing, normalising, and structuring logs from diverse sources.
• Experience designing, building, and maintaining SIEM content including correlation rules, dashboards, reports, alerts and detection logic.
• Experience monitoring and managing log ingestion, data quality, and platform performance.
• Ability to analyse ingestion trends and identify optimisation opportunities.
• Strong stakeholder engagement and communication skills.
• Australian Government security clearance (NV1 minimum) or the ability to maintain one.

Responsibilities

• Monitoring and maintaining SIEM platform health, ensuring availability and fitness for use by SOC analysts
• Onboarding and integrating log sources across network, endpoint, cloud and application environments
• Improving log fidelity, structure, and consistency to maximise detection effectiveness
• Monitoring and analysing log ingestion rates and trends
• Identifying and implementing optimisation opportunities to improve performance and reduce storage/ingestion costs
• Developing and tuning correlation rules, alerts, dashboards and reports to reduce false positives and improve detection coverage
• Maintaining and enhancing SIEM integrations, including threat intelligence feeds and API‑based connections
• Supporting incident response and remediation activities in collaboration with SOC teams
• Developing and maintaining standard operating procedures for cyber security tooling
• Engaging with system owners and stakeholders to uplift logging maturity and support ongoing capability improvements

Skills

SIEM engineering

SOC operations

Detection engineering

Log onboarding

Stakeholder engagement

Tools

Google SecOps

Chronicle

BindPlane

Job description

Countersight is a Canberra-based cybersecurity specialist delivering security research, capability development and consulting. We seek a Senior Cyber Security Operations Analyst (SIEM / Detection Engineering) to work hands-on with SIEM tooling, onboarding logs, tuning content, and optimising platform performance across client environments.

The role focuses on hands-on SIEM engineering, detecting events, and collaborating with client SOC teams to improve telemetry, data quality and detection