Security Engineer (SIEM)

About the role

Metrea is seeking a skilled Security Engineer to join its Australian team, focusing on designing, implementing and managing security monitoring and detection capabilities within a classified Microsoft Azure environment.

Key responsibilities

• Administer, configure and maintain Microsoft Sentinel and Azure Log Analytics platforms.
• Design, develop and continuously improve SIEM use cases, analytics rules and automated response playbooks.
• Perform alert tuning, threat hunting using KQL and integrate new data sources to enhance visibility.
• Investigate security events, support incident response and map detections to MITRE ATT&CK techniques.
• Collaborate with infrastructure and application teams to remediate identified risks and support audits and compliance activities.

Required profile

• 5+ years of experience in cyber security, security operations or SIEM administration.
• Experience managing enterprise‑scale SIEM platforms, preferably in government, defence or highly regulated environments.
• Hands‑on experience with Azure security services and knowledge of ISM/PSPF requirements.
• Bachelor’s degree in a relevant field or equivalent industry experience.

Required skills

• Microsoft Sentinel, Azure Log Analytics, Kusto Query Language (KQL).
• Azure Logic Apps, SOAR automation principles.
• Microsoft Defender suite (XDR, Endpoint, Identity, Cloud) and Entra ID (Azure AD).
• MITRE ATT&CK framework and threat‑hunting techniques.
• Data ingestion architecture, log source onboarding from cloud, network and third‑party platforms.