Salary: $140 - $160 p.h.
Cyber Security Threat Detection Engineer - Federal Government
Must be Canberra, ACT based.
12 months + 2 x 12-month extensions
Baseline Clearance | Australian Citizenship Required
A modern environment Government department is seeking an experienced Threat Detection Engineer to join its Cyber Security Operations capability. The role will focus on developing and improving threat detection across enterprise SIEM, SOAR and EDR platforms, including emerging threats associated with AI platforms and services.
Key Responsibilities
- Develop, test and tune detection rules and use cases across SIEM, SOAR and EDR, including playbooks and incident response automation.
- Conduct threat modelling using MITRE ATT&CK, STRIDE or PASTA, translating threats, vulnerabilities and intelligence into effective detection coverage.
- Develop monitoring for emerging AI security threats, including prompt injection, data leakage, model abuse and adversarial activity.
Essential Experience
- Strong detection engineering experience across at least two SIEM platforms, such as Microsoft Sentinel, Splunk, QRadar or Elastic.
- Minimum 5 years' cyber security operations experience, with hands-on SIEM, SOAR, EDR, threat intelligence and incident response capability.
- Practical experience in threat modelling and AI security monitoring, ideally including Microsoft Copilot, Azure AI or enterprise AI platforms.
Highly Desirable
- Sigma rule development and experience translating detection logic between security platforms.
- Experience with CrowdStrike, Microsoft Defender for Endpoint or Carbon Black, plus Python/Bash security automation.
- Knowledge of MITRE ATLAS, OWASP LLM Top 10, NIST and ASD/ACSC AI security guidance, with relevant GIAC/SANS/CISSP certifications highly regarded.
Please click
APPLY NOW if you are Canberra based and hold a security clearance and have strong experience within Cyber Security Threat Detection and Jake will be in touch to confirm further details.