Senior Threat Detection Engineer: Splunk, Sentinel & MDE

Hatchit Studios; Canberra; Hybrid; AUD 120,000 - 190,000; Full time

Job summary

Hatchit Studios is seeking an experienced Senior Cyber Threat Analyst / Threat Detection Engineer for a long-term labour hire engagement within a Federal Government Security Operations Centre. This hands-on role focuses on researching, developing, testing and maintaining detection use cases, rules and SIEM correlation logic across the SOC technology stack.

The environment centres on Splunk Cloud with SOAR, and includes Microsoft Sentinel and Defender for Endpoint.

Qualifications

• 5+ years' experience in cyber security operations or threat detection engineering.
• Hands-on in SIEM rule development and correlation logic.
• Experience across at least two enterprise SIEM platforms (e.g., Splunk and Sentinel).
• Strong Splunk hands-on experience.
• Experience with SIEM, SOAR and EDR detections.
• Experience with incident response automation.
• Threat modelling experience (STRIDE, MITRE ATT&CK).

Responsibilities

• Develop threat detection use cases from threat models and risks.
• Develop and maintain SIEM correlation logic, detection rules and content.
• Develop detections across SIEM, SOAR and EDR technologies.
• Create playbooks for alert validation and incident response automation.
• Maintain threat models (STRIDE, MITRE ATT&CK, attack path analysis).
• Identify detection opportunities and monitoring coverage gaps.
• Research emerging threats to create new detection content.
• Assess AI-related security risks for platforms like Copilot/Azure AI.
• Collaborate with defence analysts to test and tune rules.
• Assist with incident response and onboarding new data sources.
• Translate threat modelling outcomes to monitoring and response capabilities.

Skills

5+ years experience

SIEM rule development

Splunk

SOAR

EDR

Threat modelling

Python Bash scripting

Tools

Splunk

Microsoft Sentinel

Microsoft Defender for Endpoint

QRadar

Elastic

Sigma rules

CrowdStrike

Carbon Black

Job description

Hatchit Studios is seeking an experienced Senior Cyber Threat Analyst / Threat Detection Engineer for a long-term labour hire engagement within a Federal Government Security Operations Centre. This hands-on role focuses on researching, developing, testing and maintaining detection use cases, rules and SIEM correlation logic across the SOC technology stack.

The environment centres on Splunk Cloud with SOAR, and includes Microsoft Sentinel and Defender for Endpoint.