Job details
Cyber Advisors provide ICT security advice and assistance to government including policy creation project advice and assistance and research.
Key duties and responsibilities
The Services delivered in collaboration with and under supervision by nominated AFP personnel include but are not limited to the following:
Design and implement onboarding of log sources into the SIEM from cloud on-premise identity endpoint and network platforms
Develop and maintain parsing normalisation and data quality standards for logs
Build and maintain SOAR workflows to automate alert triage enrichment containment and response
Integrate SIEM and SOAR platforms with security and IT tooling including EDR IAM ticketing email firewall and threat intelligence systems
Develop tune and maintain high-quality detection rules aligned to threat detection capability attacker techniques and organisational risk.
Create and maintain SOC playbooks and operational runbooks mapped to automated workflows
Reduce false positives and improve alert fidelity through continuous tuning and enrichment
Support incident response through log analysis detection insights and rapid rule development
Conduct detection gap analysis following cyber events incidents and threat intelligence updates
Maintain performance reliability and configuration of SIEM/SOAR platforms
Implement dashboards for monitoring and health checks for the SIEM/SOAR platforms
Develop and maintain clear accessible documentation for analysts and capture system knowledge to support ongoing operations and knowledge transfer.
Define and report on key detection and response performance metrics (e.g. MTTD MTTR alert quality automation or MITRE coverage) to assess effectiveness and inform continuous improvement initiatives.
Technical skills
Technical skills candidates would need to have (including but not limited to) are listed below:
Demonstrated hands-on experience as a tech lead implementing and administering enterprise SIEM platforms such as Microsoft Sentinel/Windows Defender IBM Qradar Elastic or Splunk with strong experience in automation writing complex queries correlation rules parsers and developing SOC playbooks
Proven ability to optimise and integrate SIEM platforms reduce false positives and improve alert qua
Required Skills:
1. Experience in Salesforce Vlocity platform using specifically Apex LWC Ominiscripts Flexcards. Integration procedure and DataRaptors. 2. Experience working with OOP frameworks & design patterns. 3. Experience in building and working with integration (example REST APIs Platform Events). 4. Platform Developer I Platform Developer II Ominstudio Developer certified. 5. Experience in Salesforce Sales Cloud Service Cloud Community Cloud Health Cloud implementations. 6. Experience working with Source Control tools (e.g. GitLab) & package-based development
Required Education:
Bachelors
Employment Type : Full Time
Experience: years
Vacancy: 1
Principal Security Engineer Cyber Advisor • Canberra, Australian Capital Territory, Australia
Experience with Entra ID, Active Directory, AD FS, Azure AD Connect, Certificate Management and PowerShell automation.Must be an Australian Citizen with ability to obtain NV1 clearance.Our client i... Show more
A place to share your ideas freely — even if they’re daring or different.Where the true you can learn, grow, and thrive.At Verizon, we power and empower how people live, work and play by connecting... Show more
A leading staffing and recruiting firm is seeking a Lead Network Security Engineer for a Federal Government Client in Canberra.The role is a 12-month contract with potential extensions, requiring a... Show more
Cybersecurity Engineer – Bluestaq Australia.Location - Canberra | On-site, with occasional remote flexibility subject to project requirements.Role Type - Full-Time or Contract.Our purpose is to del... Show more
Long term Contract role – Federal Govt.Australian Citizenship with NV1 Clearance.A high‑performing Federal Government cyber security team is seeking an experienced.You will lead security risk asses... Show more
A leading technology solutions provider is seeking a Principal IRAP Assessor/Cyber Security Specialist to join their team in Canberra or Melbourne.This role involves providing expert guidance and a... Show more
A leading IT consultancy is looking for a Cyber Security Engineer / Platform Specialist in Canberra, ACT.This hybrid role requires skills in Linux, application control, and vulnerability management... Show more
Lead Network Security Engineer (EL1 equivalent).We are seeking Lead Network Security Engineers to support the operation, maintenance and uplift of critical network infrastructure within the Defence... Show more
A leading technology company in Australia seeks a Principal IRAP Assessor/Cyber Security Specialist to deliver expert cyber security guidance and assessments.You will engage with national framework... Show more
Long term Contract role – Federal Govt.Australian Citizenship with NV1 Clearance.A high‑performing Federal Government cyber security team is seeking an experienced.You will lead security risk asses... Show more
Electro Optic Systems in Canberra invites a Senior Cyber Security Engineer to lead system-level cyber security across Defence programs.You will define requirements, develop secure architectures, an... Show more
A leading security consultancy is seeking a Lead Network Security Engineer in Canberra to enhance critical network infrastructure within the Defence environment.You will be responsible for secure n... Show more
Opportunity to design, secure, and modernise safety-critical networks.Be part of a multi-year, enterprise-wide network transformation program.Work with leading network and security technologies acr... Show more
A leading technology solutions provider in Canberra is offering a permanent opportunity to design, secure, and modernise safety-critical networks.The selected candidate will play a crucial role in ... Show more
Lead Cyber Security Operations Engineer – SIEM Detection & Cloud Security.Join a major ICT labour hire engagement supporting a high-impact cyber security uplift in a hybrid environment.You’ll take ... Show more
A technology consulting firm in Canberra is looking for an experienced SAP Cyber Security Specialist / Infrastructure Engineer.You will manage identity provisioning, implement secure authentication... Show more
SAP Cyber Security Specialist / Infrastructure Engineer.Join to apply for the SAP Cyber Security Specialist / Infrastructure Engineer role at M&T Resources.Onsite (flexible arrangements may be cons... Show more
Cyber Security Engineer / Platform Specialist.Peoplebank Canberra, Australian Capital Territory, Australia.Peoplebank are a leading information technology talent consultancy that focuses on providi... Show more
Senior Network Security Engineer.Senior Network Security Engineer.The Network Technology Recruitment.The Network Technology Recruitment provided pay range.This range is provided by The Network Tech... Show more
A leading technology recruitment agency is looking for a Senior Network Security Engineer in Canberra.The ideal candidate will have extensive Cisco networking experience and skills in securing comp... Show more
