Cyber Security Engineer

Softtestpays

Canberra, ACT
Permanent
Full-time

1 month ago
Apply easily

Australian Citizens With the ability to obtain NV1 Clearance residing in Australia only respond.

Contract start 01 July 2023 to 30 June 2024, 2 x 12 months extensions.
Australian Citizen, ability to obtain NV1 Clearance, Canberra role.

Send your responses toOverviewThe department requires an experienced cyber security engineer to assist with the following deliverables: * Develop and maintain of SIEM alerts and dashboards to aid with threat detection.

Work with Security Analysts to understand, develop and maintain automatic detection and response capabilities using available SOAR capabilities.
Utilise available threat intelligence to enrich alerts.
Develop and maintain team SOPs and playbooks for SIEM management and configuration, including, alert exclusions and alert tuning.
Assist with the upkeep of the SecOps environment where needed.

Every application requires to address selection criteria as part of application submission.Essential Criteria1. Demonstrated experience managing/maintaining logging and SIEM technologies2. Demonstrated knowledge of cyber security principles and processes in a defensive context3. Demonstrated ability to develop alerting rules and dashboards to assist with threat detection and incident response.4. Ability to learn and understand how the operating environment functions normally and effectively identify anomalies when they occur5. Demonstrated experience with development practices and DevOps pipelines.Desirable Criteria1. Experience with Azure Sentinel, Kusto Query Language (KQL) and Azure logging mechanisms2. Experience with Microsofts suite of security tools, including Azure Security Centre, Microsoft 365, and Microsoft Defender for tools (Endpoint, Identity, etc.)3. Experience managing a Windows environment, including patching, Active Directory and Group Policy management.4. Experience utilising threat intelligence services and tools such as MISP to enrich data and alerts that originate from SIEM and logging tools such as Syslog-ng.

Softtestpays