SIEM Expert (Principal Security Engineer)

Our client is a global managed security services provider with a strong presence across Australia and a portfolio of enterprise and government customers. They are hiring a Principal SIEM Engineer to join their Cyber Security Incident Response team. This is a hands-on platform engineering role. You will own and improve the SIEM environment across a portfolio of clients, write detection rules, manage log ingestion, and act as the senior technical escalation point for the team.

What you will be doing

• Hands-on platform ownership across Palo Alto XSIAM, SPLUNK, or Microsoft Sentinel
• Detection rule and use case creation, correlation searches, CIM normalisation
• Log ingestion design, agent configuration and onboarding new data sources
• Custom dashboard creation, RBA configuration and platform health management
• Senior technical advisor to clients and engineering escalation point for the team
• Contributing to incident response discussions from an engineering standpoint

What we are looking for

• 10+ years of overall IT experience with at least 8 years in security operations
• Hands-on SIEM platform engineering experience with Splunk, Sentinel or XSIAM
• Strong query language skills (SPL, KQL or XQL)
• Experience writing detection rules and use cases from scratch
• Background in a SOC, CSIRT or managed security services environment
• Exposure to the analyst and operations side of SOC work
• Excellent communication skills suited to a client-facing role

Nice to have

• Splunk Enterprise Security Certified Admin or Splunk Architect certification
• Palo Alto XSIAM Engineer or PCNSE certification
• SOAR experience (XSOAR, Splunk Phantom)
• Vulnerability management exposure (Qualys, Tenable)
• CISSP, GCIH, GCIA or similar industry certifications

The setup

• Permanent role, no sponsorship available
• Hybrid working, 2-3 days in office
• Rotating roster across business hours only (7am-7pm AEST). No overnight shifts.
• Join an established CSIR team

Aboriginal and Torres Strait Islander Peoples are encouraged to apply.
To apply please click apply or call Cody Berry on 02 8289 3123 for a confidential discussion.