Security Logging Engineer / SIEM Consultant

Security Logging Engineer / SIEM Consultant

Whizdom | Melbourne, Victoria, AU

Posted 18 days ago

Apply Now

Description

  • DesignandimplementloggingsolutionsusingMicrosoftSentinelandAzureLogAnalytics

  • AzurePolicy,DefenderforCloudanddiagnosticsettings

  • KnowledgeofEssentialEight,SOCIAct,IEC62443orrelatedsecurityframeworks


SecurityLoggingEngineer/SIEMConsultant


Location:Melbourne


ContractTerm:3-6months+


Joinagrowingcybersecurityprogramfocusedonimprovingenterpriselogging,monitoringanddetectioncapabilities.We'relookingforahands-onSecurityLoggingEngineerwithstrongMicrosoftSentinelandAzureexperiencetohelpdeliverscalableloggingsolutionsandworkcloselywithplatformteamsandSOCstakeholders.


Key Responsibilities



  • DesignandimplementloggingsolutionsusingMicrosoftSentinelandAzureLogAnalytics

  • Configuredatacollectionrules,workspacesanddestinationtables

  • IntegratelogsourcesthroughAzureMonitorAgent,AzureArc,WindowsEventForwarding,SyslogandCEF

  • SupportWindows,Linuxandnetworkdevicelogonboarding

  • Defineclear,testablerequirementsandacceptancecriteria

  • Collaboratewithdeliveryteams,platformownersandsecurityoperationsteams


You'll bring



  • Hands-onMicrosoftSentinelandLogAnalyticsexperience

  • StrongKQLskills

  • ExperiencewithWindowsandLinuxlogging

  • Exposuretonetworkandfirewalllogging(Cisco,PaloAlto,F5orsimilar)

  • Abilitytotranslatetechnicalrequirementsintopracticaloutcomes


Nice to Have



  • ASIMnormalisationandparserdevelopment

  • AzurePolicy,DefenderforCloudanddiagnosticsettings

  • OT/ICSorcriticalinfrastructureenvironments

  • KnowledgeofEssentialEight,SOCIAct,IEC62443orrelatedsecurityframeworks

  • JiraandConfluenceexperience


Candidateswillneedtobewillingtoundergopre-employmentscreeningchecks,whichmayincludeIDandworkrightsverification,securityclearanceverification,andanyotherclient-requestedchecks.


#J-18808-Ljbffr