Senior Threat Operations Engineer — Hybrid

ASIC; Melbourne; Hybrid; AUD 154,000 - 171,000; Full time

Benefits offered by this job

Attractive superannuation

Additional leave entitlements

50/50 hybrid work-from home model

Assistance for study and professional 

development

Job summary

ASIC's Cyber Security Group is looking for a Senior Engineer to join Threat Operations (SOC). The role leads incident response, threat detection and hunting, collaborating with diverse teams to investigate complex threats and strengthen detection, automation and intelligence use across Microsoft Sentinel/Defender.

You will shape detections, playbooks, telemetry integration, and advanced queries (KQL), providing senior leadership during incidents and advancing defensive AI initiatives within a

Qualifications

• A tertiary qualification in cyber security or related discipline, and/or equivalent professional experience.
• Demonstrated experience in senior Threat Operations, Incident Response, Threat Hunting or similar cyber security role.
• Significant experience with Microsoft security technologies (Sentinel/Defender).
• Experience analysing telemetry across sources to identify indicators of compromise.
• Operationalising cyber threat intelligence for detection, hunting and incident response.
• Security automation and orchestration using APIs, scripting and automated workflows.
• Exposure to AI or generative AI in defensive cyber security use cases.

Responsibilities

• Develop, optimise and maintain threat detections, security analytics and response playbooks across monitoring platforms including Microsoft Sentinel and Defender.
• Configure, integrate and troubleshoot security telemetry and log sources to enable monitoring and incident response.
• Develop advanced queries (e.g., KQL) to support investigations and proactive threat hunting.
• Provide senior technical leadership during cyber incidents, guiding containment, response and recovery.
• Operationalise cyber threat intelligence to improve detection, hunting and response.
• Develop security automation and orchestration using Logic Apps, scripting and APIs to improve efficiency and scalability.

Skills

Threat Operations

Incident Response

Threat Detection

Threat Hunting

Automation & Orchestration

APIs & Scripting

AI in cybersecurity

Education

Cyber security degree or related discipline

Tools

Microsoft Sentinel

Microsoft Defender

PowerShell

Job description

ASIC's Cyber Security Group is looking for a Senior Engineer to join Threat Operations (SOC). The role leads incident response, threat detection and hunting, collaborating with diverse teams to investigate complex threats and strengthen detection, automation and intelligence use across Microsoft Sentinel/Defender.

You will shape detections, playbooks, telemetry integration, and advanced queries (KQL), providing senior leadership during incidents and advancing defensive AI initiatives within a