Threat Detection Architect (SIEM/EDR)

e2 Cyber; Canberra; On-site; AUD 120,000 - 150,000; Full time

Job summary

e2 Cyber is seeking a Threat Detection Engineer to join a high-performing cybersecurity team in Canberra, ACT. The role focuses on developing detection content, threat models and intelligence integrations within a modern SOC stack, spanning SIEM, SOAR and EDR platforms, while working in ITIL and Agile environments.

You will build detection rules, playbooks and uplift monitoring and response capabilities across cloud and on-premises environments, collaborating with cyber defence analysts and

Responsibilities

• Develop detection use cases informed by threat models, vulnerabilities, intelligence and incident reports.
• Build and maintain detection rule syntax across SIEM and EDR platforms.
• Create playbooks to support alert validation and incident response workflows.
• Maintain threat models using STRIDE, ATT&CK, attack path analysis.
• Assess threats related to AI platforms and develop monitoring controls for misuse and data leakage.
• Collaborate with architecture and engineering teams to translate threat modelling into monitoring requirements.
• Maintain threat intelligence integrations across the SOC technology stack.
• Support incident response activities under direction of the Incident Manager.

Job description

e2 Cyber is seeking a Threat Detection Engineer to join a high-performing cybersecurity team in Canberra, ACT. The role focuses on developing detection content, threat models and intelligence integrations within a modern SOC stack, spanning SIEM, SOAR and EDR platforms, while working in ITIL and Agile environments.

You will build detection rules, playbooks and uplift monitoring and response capabilities across cloud and on-premises environments, collaborating with cyber defence analysts and