Security Engineer - SOAR

Drive the creation and continuous refinement of Security Orchestration, Automation, and Response (SOAR) methodologies, intellectual property and supporting collateral.

Design, develop, and maintain SOAR playbooks and automation workflows to enhance incident response efficiency and standardisation.

Proactive research and recommend automation opportunities across security operations to streamline incident response processes and significantly reduce operational overhead.

Optimize detection rules and use case logic across security tools especially SOAR, to minimize false positives and maximize accurate threat detection capabilities.

Collaborate with stakeholders to configure, fine-tune and optimize security tools for peak performance and alignment with security goals.

Identify and propose innovative solutions and process improvements to streamline operations and enhance client security environments and operating efficiencies.

Work in multi-disciplined teams to advise, design, build, and implement pragmatic, secure, cloud/hybrid solutions that strictly adhere to Australian Cyber Security Centre (ACSC) requirements for PROTECTED implementations.

Analyse security requirements and ensure meticulous alignment with relevant government frameworks (e.g., PSPF, ISM)

Support the safe, secure, and compliant storage of sensitive and security classified materials produced by or entrusted to the team (CT).

Develop and maintain comprehensive, up-to-date documentation on all security procedures, configuration baselines and operational guidelines.

Take ownership of professional development, continuously deepening technical skills in capability areas (e.g., SOAR) while actively exploring and developing new broadening professional capabilities

Stay current with the latest cybersecurity trends, technologies, and best practices to continuously enhance the organization's security posture and competency.

Enhance security team accomplishments and competence through the delivery of quality, secure cloud/hybrid solutions.

Proven experience in cybersecurity engineering, including infrastructure, network, endpoint and cloud security

Highly experienced in implementing SOAR for the purpose of reducing recurring tickets (FortiSOAR preferred)

Demonstrated experience implementing cloud and hybrid security solutions

Strong consulting and engagement experience with the ability to represent cyber security viewpoints to diverse audiences.

Recent experience with security design, architecture, and implementation for Microsoft cloud services.

Experience applying the ACSC Information Security Manual (ISM) to cloud or hybrid solutions

Familiarity with Australian cyber regulation and compliance standards (Essential Eight, SOCI, NIST. ISM).

Proven ability to work in a fast-paced, fast-changing environment with experience integrating security into the DevOps lifecycle.

Australian citizenship and an active NV1 security clearance are highly regarded.

Our company is more than just a workplace, it's a hub of inspiration and creativity where employees love to work! Here's why:

Hybrid working (for majority of our roles) with team anchor days to support collaboration.

Extensive training and development opportunities that enable continual growth as part of your career planning.

Extensive discounts and benefits to maximise your money.

A choice of your IT equipment to maximise your success and access to cost-price tech for your personal needs.

Fun team events to celebrate achievements and connect with colleagues outside work as part of our engaging culture.

CT celebrates diversity and enables every voice to be heard as we drive to create the world we want. Apply today and be part of a team that values innovation, inclusivity, variety and diverse backgrounds.

Note: A valid Vulnerable People / Working with Children Check (WWCC) and Police Check are required.