Security Engineer

Now Hiring : Security Engineer(SIEM / Splunk Specialist)Employment: Permanent RoleExperience: 5+ years Location: Sydney, Australia - Hybrid Eligibility: Candidates must have the right to work in Australia (Citizen, PR, Valid Visa holders).Key Responsibilities:Design, deploy, and manage SIEM solutions, primarily using Splunk Enterprise/Splunk Cloud.Develop and optimize Splunk queries, dashboards, alerts, and correlation rules for real-time threat detection.Integrate various log sources (network, endpoints, applications, and cloud services) into Splunk.Support incident response activities by providing log analysis and event correlation.Perform use case development and continuously enhance detection content based on evolving threats.Maintain data onboarding pipelines and ensure data integrity, normalization, and enrichment.Collaborate with security operations, threat intelligence, and IT infrastructure teams to improve monitoring coverage.Automate repetitive tasks using Python, PowerShell, or bash scripting.Ensure SIEM configurations and processes align with compliance frameworks (e.g., ISO 27001, NIST, SOC 2, PCI-DSS).Required Experience:Strong hands-on experience with Splunk Enterprise / Splunk Cloud, including deployment, configuration, and administration.Expertise in Splunk SPL (Search Processing Language) for query and dashboard development.Familiarity with other SIEMs (e.g., QRadar, ArcSight, Sentinel) is a plus.Solid understanding of security event analysis, network protocols, and common attack techniques (MITRE ATT&CK framework).Experience with log ingestion from firewalls, proxies, servers, and cloud platforms (AWS, Azure, GCP).Knowledge of automation/orchestration tools (SOAR) is an advantage.Proficiency in scripting languages such as Python or PowerShell.Please drop your CV to: shiv@kaizenglobaltechnologies.com