Senior Threat Detection Engineer

Velan Consulting Pty Ltd; Canberra; Hybrid; AUD 120,000 - 190,000; Full time

Job summary

Velan Consulting Pty Ltd is seeking a Senior Cyber Threat Analyst in Canberra, offering a hybrid work arrangement. The role focuses on threat detection engineering, SIEM content development, and incident response within a dynamic CIO Division.

The successful candidate will drive use-case research, develop detection content for SIEM/EDR, and collaborate across architecture and engineering to strengthen monitoring and AI security controls across cloud and on-prem environments.

Qualifications

• Minimum five years' experience in cyber security operations.
• Experience developing detection content across SIEM, SOAR and EDR platforms.
• Practical experience conducting threat modelling using recognised methodologies (e.g. STRIDE, ATT&CK).
• Experience with AI security monitoring and enterprise AI platforms such as Microsoft Copilot or Azure AI.

Responsibilities

• Develop use cases based on threat models, system risks, vulnerabilities, intelligence, incident reports and industry frameworks.
• Develop the detection rule syntax for SIEM/EDR technologies.
• Create playbooks for alert validation by understanding detection context.
• Maintain threat models using STRIDE, ATT&CK and other methodologies to identify coverage gaps.
• Collaborate with architecture to translate threat modelling into monitoring and response capabilities.
• Maintain threat intelligence integrations across SOC technology stack.
• Assist incident response under direction of the incident manager.
• Assist onboarding of new data sources for use cases.

Skills

Threat detection

SIEM expertise

Threat modelling

AI security monitoring

EDR & SOAR

Automation scripting

Tools

Splunk

Microsoft Sentinel

QRadar

Elastic

CrowdStrike

Microsoft Defender for Endpoint

Carbon Black

Job description

Velan Consulting Pty Ltd is seeking a Senior Cyber Threat Analyst in Canberra, offering a hybrid work arrangement. The role focuses on threat detection engineering, SIEM content development, and incident response within a dynamic CIO Division.

The successful candidate will drive use-case research, develop detection content for SIEM/EDR, and collaborate across architecture and engineering to strengthen monitoring and AI security controls across cloud and on-prem environments.