Cyber Security Analyst – SIEM (EL1) – Canberra

About the role

The Federal Government client is looking for a Cyber Security Technical Analyst (EL1) to design, implement and optimise Security Information and Event Management (SIEM) capabilities. The role is hybrid, based in Canberra, and supports the department’s cyber security posture across detection, response and compliance.

Key responsibilities

• Design, develop and implement log solutions for SIEM, including ingestion, storage and querying.
• Create and maintain comprehensive documentation for SIEM and logging implementations.
• Identify and close capability gaps in alerting, detection and security event logging.
• Build and tune alerting and detection rules across SIEM/SOAR toolsets.
• Liaise with third‑party vendors and internal business areas to achieve capability goals.
• Investigate and implement improvements to uplift the overall security posture.

Required profile

• Current NV1 security clearance or higher.
• Demonstrated experience with Azure and Microsoft Sentinel.
• Proven ability to document findings and implement security policies.
• Experience providing security advice to stakeholders and senior leadership.
• Background in ingesting logs, developing use cases and tuning alerts.
• Experience working within a cyber security team and following direction.

Required skills

• Azure
• Microsoft Sentinel
• SIEM
• SOAR
• Log ingestion, storage and querying
• Knowledge of Australian security frameworks (PSPF, ISM, Essential Eight)

What we offer

• Three‑year fixed‑term contract (initial 12 months with possible 24‑month extension).
• Hybrid work arrangement – 3 days onsite, 2 days remote.
• Opportunity to work on high‑impact government cyber security initiatives.