SOC Security Engineer — Splunk & Detection

Macquarie Technology Group; Canberra; On-site; AUD 90,000 - 130,000; Full time

Job summary

Macquarie Technology Group in Canberra is seeking a Security Engineer to join our cyber security team. This on-site role focuses on monitoring and responding to security alerts within our SOC.

You’ll onboard log sources into Splunk, develop detections, investigate incidents, and work with cloud, network and engineering teams to raise security visibility and improve outcomes. The ideal candidate has 18 months to 4 years in a SOC, good knowledge of MITRE ATT&CK, and a proactive mindset to learn

Qualifications

• 18 months to 4 years hands-on SOC experience
• Experience onboarding, validating, and tuning log sources in Splunk
• Strong working knowledge of attack techniques and MITRE ATT&CK
• Experience with security technologies such as firewalls, IDS/IPS, endpoint detection/tools, cloud security platforms

Responsibilities

• Monitor, triage, investigate, and respond to security alerts within the SOC
• Onboard and integrate new log sources into Splunk, write data inputs, and validate data quality
• Develop, refine, and optimise Splunk searches, dashboards, alerts, and detection logic
• Investigate security events, determine severity, escalate incidents per playbooks
• Contribute to SOC process improvements and detection logic
• Collaborate with cloud, network, and engineering teams to improve log coverage and monitoring

Skills

SOC experience

Threat detection

Incident response

Security analytics

MITRE ATT&CK

Security communications

Team collaboration

Security monitoring tools

Education

Bachelor in Cyber Security / IT / CS

Tools

Splunk

Firewalls/IDS/IPS

Cloud security platforms

SOAR platforms

Job description

Macquarie Technology Group in Canberra is seeking a Security Engineer to join our cyber security team. This on-site role focuses on monitoring and responding to security alerts within our SOC.

You’ll onboard log sources into Splunk, develop detections, investigate incidents, and work with cloud, network and engineering teams to raise security visibility and improve outcomes. The ideal candidate has 18 months to 4 years in a SOC, good knowledge of MITRE ATT&CK, and a proactive mindset to learn