SIEM Engineer – Cyber Security (Hybrid, Sydney)

About the role

We are seeking an experienced SIEM Engineer to strengthen our cyber‑security capabilities across cloud and on‑premise environments. The role is based in Sydney and operates in a hybrid model, supporting a range of security platforms and initiatives.

Key responsibilities

• Implement and support endpoint detection and response (EDR), vulnerability management, email/internet security and cryptographic controls.
• Design, deploy and maintain security capabilities in Azure and AWS cloud environments.
• Enhance identity and access management services, including Azure Entra ID, Active Directory, RBAC, MFA and SSO.
• Lead SIEM and SOC uplift projects, configure log retention and evaluate next‑generation SIEM solutions.
• Deliver and operationalise security platforms such as CrowdStrike, AlgoSec, API security controls and certificate management solutions.
• Develop and maintain automation scripts for security tasks and operational processes.
• Document standard operating procedures and service management plans.
• Collaborate with internal stakeholders and technology partners to deliver secure outcomes aligned with business priorities.

Required profile

• 5+ years of hands‑on experience with next‑generation SIEM platforms.
• 7+ years of overall cyber‑security experience.
• Eligibility to work in Australia (citizen, PR or valid visa).
• Proven experience securing Azure and AWS environments.
• Strong background in IAM, EDR, vulnerability management and security automation.

Required skills

• Next‑gen SIEM platforms
• Endpoint Detection and Response (EDR)
• Vulnerability management
• Email and internet security
• Cryptographic controls
• Azure and AWS
• Azure Entra ID, Active Directory, RBAC, MFA, SSO
• CrowdStrike, AlgoSec, API security controls, certificate management solutions
• Scripting for automation (e.g., PowerShell, Python)