Senior Security Engineer

GEO SPACES - (Senior) Security Engineer Join Leidos & work on AGO GEO SPACES mission critical networks GEO SPACES Security Operations Capability Minimum NV2 willing to uplift to TSPV + DISA, located in Canberra Due to the nature of the role, you must be an Australian Citizen who holds an active NV2 & be willing to uplift to TSPV security clearance; accompanied by the ability to be successful for a DISA/OSA. Your New Role and Responsibilities This role will report directly to the GEO SPACES Security Operations Team Lead and be capable of operating independently within the scope of their duties. There is an element of flexibility in this role based on available skills and experience. Security Engineers will work closely with the Cyber Security Analysts as well as independently to deliver the following functions: Do Work That Matters Primary roles and responsibilities: System security controls review and implementation – OS, application and network hardening in accordance with DSPF and ISM controls. System log on-boarding into centralised SIEM including log normalisation, log forwarder deployment and configuration. Security tool deployment and configuration. Detection engineering including testing, validation, playbook development and quality assurance. System security advice and collaboration with network and operations teams, including IT security engineering of; endpoint, network, gateway and other Configuration Items In-depth experience with: SIEM technologies – Splunk AWS and AWS security applications EDR/XDR tools Cloud and web application firewalls IDAM OS SOE hardening – Linux and Windows Windows AD, Server and group policies Secondary duties: Cyber Threat Intelligence platform and feed integration and maintenance Vulnerability Management platform and tools, integration and maintenance Quality Assurance and Control of SOC investigations and response Support complex and emergency Incident Response activities using a range of cloud and other response tools, techniques and procedures. Conduct Research, Development and Testing of novel and emerging technologies, threats and opportunities in the cyber security domain Support Hunt activities using industry frameworks Provide trusted advisory services Develop security operations related system requirements Change review and approvals Develop and maintain stakeholder relationships, including with partner SOCs and security authorities in and out of Defence Join us at a pivotal time as we introduce multiple new systems over the first 12–18 months, creating exciting opportunities to shape and mature our evolving capability. During that period, it is expected that the following will mature within the Security Operations team: Team structure and alignment to capability delivery to support the larger team and expected higher cadence of work Process and procedure for both internal operations and engagement with external capabilities Reporting within the Leidos structure, the agency and other authorities. What You’ll Bring to Make An Impact Experience levels that are commensurate with various levels of security operations roles, a passion for IT security operations and the ability to work well as part of our team. This role will primarily focus on the on-boarding of new systems, ensuring that appropriate technical security controls are implemented and effective centralised monitoring can be achieved. It is expected that you will work