Senior Platform Security Engineer (SIEM)

A market leader is investing millions into a large scale Cyber Security transformation, and is looking for a Senior SIEM Platform Engineer to own and build out their Palo Alto Cortex XSIAM platform.

The salary for the right person is up to $190,000 base plus a bonus and is based in Sydney, on a hybrid working model. This is a full time role with long term learning and career opportunities.

About the opportunity:

As part of a renewed strategy, a new security platform engineering function has been created with a clear mandate; do it once, do it right. The team is being built with senior engineers and a hands on leader, and this role will own the SIEM and SOAR platform that the wider cyber defence function relies on every day.

This role is for the engineers who would rather build and own the platform than sit on the alert queue. To be clear, this is not a SOC role. You will not be triaging alerts or running incidents; you will be making sure the platform itself is doing its job.

What the role looks like

• Owning a modern SIEM and SOAR platform (Cortex XSIAM) across cloud and on premise components
• Onboarding new log sources and making sure data is parsed, normalised and modelled correctly
• Building custom parsers and normalisation packs for applications that do not come with them out of the box, using existing pipelines and an SDK
• Keeping integrations and platform components healthy, current and well documented
• Working through requests from Cyber Defence, Threat Intel and other teams, from build through to sign off
• Helping answer questions like "is this application fully covered from a logging point of view?"

What a good fit looks like

• Solid hands on experience engineering and supporting an enterprise SIEM platform
• Experience with Cortex XSIAM is ideal; Google SecOps (Chronicle) or Microsoft Sentinel with real normalisation or parser work is equally worth a conversation
• A good understanding of how data normalisation works and why it matters for detection
• Comfortable with pipelines, APIs and some scripting; Python is a bonus
• A clear preference for engineering and platform ownership over SOC analysis
• Managed service or consulting backgrounds are very welcome, as long as you have delivered platform work end to end

Why this role

• Join a business in the middle of a major transformation, with real investment behind it
• A genuinely new function with a flat team structure and a real say in how the platform is run
• A large learning curve and genuine career growth as the function scales

If you have been doing this kind of work and want to own a platform properly, we would love to hear from you. Apply here or reach out to Craig directly at [email protected] for a confidential chat.