SIEM Analyst (Splunk) with MITRE ATT&CK Focus

TPG Telecom; Sydney; Hybrid; AUD 110,000 - 150,000; Full time

Benefits offered by this job

Flexible hybrid work

Stay Connected Mobile plan

Stay Connected NBN plan

Extra annual leave

Learning Hub access

Corporate discounts

Job summary

TPG Telecom is seeking a Cyber Security SIEM Specialist to own the Splunk Enterprise Security platform, onboard new technologies, and develop detection use cases and data models to boost monitoring and threat response across the Australian environment. You will lead integration efforts, test correlation content, and map CIM sources while aligning with MITRE ATT&CK.

The role emphasizes playbook creation for Splunk SOAR and ongoing improvement of security monitoring capabilities in a hybrid work

Qualifications

• 3+ years of SIEM integration, administration and use case development with Splunk ES.
• Experience across security operations, incident analysis and log management.
• Familiarity with CIM standards and ATT&CK mapping.

Responsibilities

• Lead security tech integration to enable timely threat identification and mitigation.
• Develop and test security event correlation content and use cases.
• Improve and support the SIEM platform amidst evolving threat landscape.
• Assist with security assessments, audits and reviews.
• Map log sources to CIM and strengthen ATT&CK coverage.
• Create playbooks for Splunk SOAR and automation.

Skills

Splunk Enterprise Security

MITRE ATT&CK framework

SIEM integration & use case dev

Threat monitoring & incident response

CIM mapping & log sources

Education

Tertiary IT/Engineering

Tools

Splunk Enterprise Security

Splunk SOAR

Job description

TPG Telecom is seeking a Cyber Security SIEM Specialist to own the Splunk Enterprise Security platform, onboard new technologies, and develop detection use cases and data models to boost monitoring and threat response across the Australian environment. You will lead integration efforts, test correlation content, and map CIM sources while aligning with MITRE ATT&CK.

The role emphasizes playbook creation for Splunk SOAR and ongoing improvement of security monitoring capabilities in a hybrid work