Cyber Security Specialist – SIEM Engineering

About the role

We are looking for a Cyber Security Specialist to join our digital technology team and help strengthen Australia Post’s Threat Detection & Response capability. This hands‑on role focuses on building, improving and operating our SIEM platform at enterprise scale across IT and OT environments.

Key responsibilities

• Support and enhance the SIEM platform, ensuring availability, performance and data quality.
• Design and build log ingestion and ETL pipelines to onboard data from diverse platforms and applications.
• Engineer, tune and maintain detections, correlation rules, alerts and dashboards aligned to threat use cases.
• Apply threat intelligence and threat landscape knowledge to detection engineering.
• Build automation and improve operational processes across Threat Detection & Response.
• Collaborate with internal technology teams to ensure end‑to‑end detection validity from source to alert.

Required profile

• Technically strong cyber security professional with a passion for SIEM engineering and detection.
• Comfortable operating in complex environments and translating security requirements into practical solutions.
• 4+ years of experience working with SIEM technologies.
• Strong experience in detection engineering, threat use‑case development and building data ingestion pipelines.
• Knowledge of MITRE ATT&CK, NIST frameworks and automation platforms such as SOAR and Logic Apps.
• Familiarity with DevSecOps, CI/CD pipelines and Infrastructure‑as‑Code (ARM/Bicep).

Required skills

• Microsoft Azure Sentinel (or comparable SIEM)
• KQL (Kusto Query Language)
• ETL pipeline development, DCRs, Codeless Connectors, Syslog
• MITRE ATT&CK framework
• NIST framework
• SOAR platforms, Logic Apps
• DevSecOps and CI/CD pipelines
• ARM/Bicep (Infrastructure as Code)
• Python scripting
• SQL scripting