SIEM Engineer for Critical Infrastructure (Sydney Onsite)

Whizdom; Sydney; On-site; AUD 168,000 - 220,000; Full time

Job summary

Whizdom invites applications for a Cyber Security Engineer role focused on SIEM, security operations and enterprise tooling in Sydney. You will contribute to threat detection, monitoring and incident response across on‑premises and cloud environments.

Join a high‑caliber team delivering secure architectures, dashboards, detections and automation while aligning with ACSC ISM, NIST and ISO 27001 standards. Collaboration with stakeholders will be essential to strengthen cyber resilience.

Qualifications

• Experience in Cyber Security Engineering within large and complex environments.
• Hands-on experience with SIEM platforms such as Splunk, Microsoft Sentinel or Elastic.
• Experience building security monitoring frameworks, detections, alerts and dashboards.
• Knowledge of SOAR technologies and security automation.
• Strong understanding of threat hunting, incident response and detection engineering.
• Experience with EDR technologies including CrowdStrike, Microsoft Defender or Trend Micro.
• Exposure to vulnerability management platforms such as Tenable or similar solutions.
• Knowledge of cyber security frameworks including ACSC ISM, NIST and ISO 27001.
• Experience supporting both cloud and on-premises technology environments.
• Scripting capability using PowerShell, Bash and/or Python.
• Excellent communication, stakeholder management and problem-solving skills.

Responsibilities

• Design secure cyber security architectures and solutions.
• Develop and enhance SIEM monitoring and detection capabilities.
• Build dashboards, correlation rules, alerts and security use cases.
• Support threat hunting, detection engineering and incident response activities.
• Manage and optimise enterprise security tooling.
• Identify security vulnerabilities and drive remediation activities.
• Implement security automation and orchestration solutions.
• Provide cyber security guidance across projects and ensure compliance.

Skills

SIEM expertise

Security operations

Threat detection

Threat hunting

Incident response

Scripting (PowerShell/Bash/Python)

Communication skills

Stakeholder management

Tools

Splunk

Microsoft Sentinel

Elastic

CrowdStrike

Microsoft Defender

Trend Micro

Tenable

SOAR platforms

Kubernetes

Ansible

Job description

Whizdom invites applications for a Cyber Security Engineer role focused on SIEM, security operations and enterprise tooling in Sydney. You will contribute to threat detection, monitoring and incident response across on‑premises and cloud environments.

Join a high‑caliber team delivering secure architectures, dashboards, detections and automation while aligning with ACSC ISM, NIST and ISO 27001 standards. Collaboration with stakeholders will be essential to strengthen cyber resilience.