Senior SIEM Threat Detection Engineer (Hybrid – Canberra)

IT Alliance Australia; Canberra; Hybrid; AUD 110,000 - 160,000; Full time

Job summary

IT Alliance Australia is assisting a Federal Government client to hire a Senior Cyber Threat Analyst - SIEM at APS6 level in Canberra. The role focuses on threat detection engineering across SIEM/EDR, developing use cases, rules, and playbooks, with hybrid working arrangements.

You will work in ITIL/Agile environments, coordinate with Defence Analysts, and contribute to threat modelling, threat intelligence, and AI security monitoring, requiring a Baseline Security Clearance and a tentative

Qualifications

• Five years minimum in cyber security operations.
• Experience across SIEM, SOAR and EDR platforms.
• Sigma rule development experience.
• Threat modelling using STRIDE, ATT&CK, etc.
• AI security monitoring experience.

Responsibilities

• Develop use cases based on threat models and risk.
• Develop detection rule syntax for SIEM/EDR.
• Create playbooks for alert validation and response.
• Maintain threat models using STRIDE, ATT&CK, and related methods.
• Assess AI-related threats and detection content.
• Collaborate with architecture/engineering to translate outcomes into monitoring.
• Maintain threat intel integrations across SOC stack.
• Research and craft new detection content.
• Assist in incident response and data source onboarding.
• Provide feedback to improve intelligence production.

Skills

Threat modelling

Threat intelligence

Automation scripting

Incident response

Detections development

Communication with stakeholders

Education

Industry certifications: GIAC, SANS, CISSP, GCIA, GCIH or equivalent

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

SOAR

EDR (CrowdStrike, Defender, Carbon Black)

Job description

IT Alliance Australia is assisting a Federal Government client to hire a Senior Cyber Threat Analyst - SIEM at APS6 level in Canberra. The role focuses on threat detection engineering across SIEM/EDR, developing use cases, rules, and playbooks, with hybrid working arrangements.

You will work in ITIL/Agile environments, coordinate with Defence Analysts, and contribute to threat modelling, threat intelligence, and AI security monitoring, requiring a Baseline Security Clearance and a tentative