" \u003cdiv class=\"ja-job-details\"\u003e \u003ch2 class=\"title\"\u003eSplunk/SIEM Cyber Security Engineer\u003c/h2\u003e \u003cdiv class=\"meta\"\u003e \u003cul class=\"classifications\"\u003e \u003cli data-id=\"20040\"\u003e IT \u0026amp; Telecomms \u003c/li\u003e \u003cli data-id=\"20041\"\u003e IT Security \u003c/li\u003e \u003cli data-id=\"20042\"\u003e Sydney \u003c/li\u003e \u003cli data-id=\"20043\"\u003e Contract or Temp \u003c/li\u003e \u003c/ul\u003e \u003cp class=\"date-posted\"\u003e 22/9/2026 \u003c/p\u003e \u003c/div\u003e \u003cul class=\"bullet-points\"\u003e \u003cli\u003eSplunk/SIEM Engineer, drive detection engineering,threat hunting \u0026amp; SOC Intgrtn\u003c/li\u003e \u003cli\u003eLong-term contract | 3 days onsite, Sydney Olympic Park\u003c/li\u003e \u003cli\u003e$1,100 per day including super\u003c/li\u003e \u003c/ul\u003e \u003cdiv class=\"description\"\u003e \u003cstrong\u003eAbout the role\u003cbr\u003e\u003c/strong\u003e\u003cbr\u003e You\u0027ll take ownership of the SIEM environment, driving detection engineering, use case development, and log source onboarding to strengthen the organisation\u0027s security monitoring and incident response capability. This is a \u003cstrong\u003ehands-on engineering role within a broader security operations function.\u003cbr\u003e\u003c/strong\u003e\u003cbr\u003e \u003cstrong\u003eKey responsibilities\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eAdminister, tune, and optimise the SIEM platform (Splunk) for performance and coverage\u003c/li\u003e \u003cli\u003eDevelop and maintain detection use cases, correlation rules, and alerting logic\u003c/li\u003e \u003cli\u003eOnboard new log sources and ensure data quality and integrity across the environment\u003c/li\u003e \u003cli\u003eSupport threat hunting, incident response, and security analytics initiatives\u003c/li\u003e \u003cli\u003eIntegrate SIEM with SOAR and other security tooling where applicable\u003c/li\u003e \u003cli\u003ePartner with SOC analysts and the broader security team to continuously mature detection capability\u003c/li\u003e \u003cli\u003eDocument use cases, playbooks, and operational procedures to a high standard\u003c/li\u003e \u003c/ul\u003e \u003cbr\u003e \u003cstrong\u003eAbout you\u003c/strong\u003e\u003cbr\u003e \u003cul\u003e \u003cli\u003eProven hands-on experience administering and engineering Splunk (or an equivalent SIEM platform)\u003c/li\u003e \u003cli\u003eStrong background in detection engineering, threat hunting, or SOC operations\u003c/li\u003e \u003cli\u003eExperience integrating SOAR and security automation highly regarded\u003c/li\u003e \u003cli\u003eRelevant certifications (Splunk certifications, CompTIA CySA+, GIAC, CISSP, etc.) highly regarded\u003c/li\u003e \u003cli\u003eAustralian citizenship, permanent residency, or NZ citizenship required (security clearance eligibility)\u003c/li\u003e \u003cli\u003eStrong stakeholder communication and documentation skills\u003c/li\u003e \u003c/ul\u003e \u003cstrong\u003eHow to apply\u003cbr\u003e\u003c/strong\u003e\u003cbr\u003e Click \"Apply Now\" or call us on 02 8999 8890 to know more. \u003c/div\u003e \u003cdiv class=\"apply\"\u003e \u003ca class=\"back-link\" href=\"#\" title=\"Back to search results\"\u003eBack to search results\u003c/a\u003e \u003cinput type=\"button\" class=\"ja-button\" data-job-id=\"4472760\" value=\"Apply Now\" title=\"Apply Now\" /\u003e \u003c/div\u003e \u003c/div\u003e "