Senior Security Engineer - Architecture

About us

We’re growing, not slowing, here at Macquarie Technology Group because we’re passionate about doing things differently. We want to challenge the industry and look for better ways of doing things. As a team, Macquarie Government are hardworking, results and success focused. We also take the time to celebrate our success and make sure our people are doing work that makes a difference.

We believe that collaboration & team connection is key for success. This role will be based in Sydney with a blended working arrangement of 3 days in our CBD offices & the remaining working from home. #LI-Hybrid

We require security clearance for this role, you must be an Australian citizen to be eligible to obtain a security clearance.

The Opportunity

Are you a Security Engineer who thrives on building and enhancing cyber security solutions that protect critical Australian Government environments? 

As a Senior Security Engineer - Architecture, you'll play a key role in designing, implementing and optimising security services across Macquarie Government's Secure Internet Gateway (SIG) and managed cyber security environments. Working alongside a highly skilled cyber team, you'll leverage technologies such as Microsoft Sentinel and Splunk to strengthen detection and response capabilities, deliver security outcomes for customers and drive continuous improvement across our security platforms. This role offers the opportunity to work on complex government environments while influencing the future direction of our cyber security services.

Why Us?

• We're Australia's Great Place to Work 2025 certified for **3 years in a row.
  **

• For the third year in a row, we have been named a Global Winner of the 2026 Gallup Exceptional Workplace Award!

• Over 42% of Australian government agencies use and trust us. They depend on us to protect them from private and state-sponsored cyber attackers.

• We have the highest Net Promoter Score on the ASX, the World's best customer experience & crowned in 2020 at the World Communications Awards.

• You’ll make an impact: Enjoy being part of a driven team with a collaborative culture that values decision-makers and action.

• We Invest in you: Accelerate your career through our learning and development opportunities - think Gallup strengths-based training, defined career pathways and fantastic internal mobility opportunities across the group.

• A dynamic and supportive team that values smart thinking.

• A workplace where your business insights are celebrated.

What you'll be doing.

• Design, implement and support cyber security solutions for Australian Government customers.
• Lead customer onboarding and implementation activities, including solution design and technical documentation.
• Build, configure and optimise Microsoft Sentinel and Splunk environments.
• Develop and tune security detections, analytics rules, dashboards and reporting capabilities.
• Investigate cyber threats, identify trends and implement preventative security controls.
• Support and enhance Secure Internet Gateway (SIG) infrastructure and managed security services.
• Collaborate with Security Operations, Infrastructure and Customer Success teams to deliver exceptional outcomes.
• Drive automation, process improvements and operational efficiencies through scripting and orchestration technologies.
• Provide technical guidance and escalation support for complex security incidents and customer enquiries. 

About You.

• 3+ years' experience in Security Engineering, Security Operations or SIEM environments.
• Strong hands-on experience with Microsoft Sentinel and/or Splunk.
• Advanced Kusto Query Language (KQL) skills and/ or Splunk SPL.
• Experience developing and tuning SIEM detections, analytics rules and threat hunting use cases.
• Solid understanding of security operations, incident response and cyber threat detection.
• Strong knowledge of networking fundamentals, firewalls and security architecture principles.
• Understanding of log collection technologies including syslog and security telemetry.
• Experience working within environments aligned to Essential Eight, ISM or similar security frameworks.
• Strong troubleshooting skills with the ability to analyse and interpret large volumes of security data.
• Excellent communication skills with a customer-focused mindset. 

Nice to Have.

• SC-100, SC-200, AZ-500 or equivalent security certifications.
• Splunk Enterprise Security certification.
• Experience with SOAR platforms and security automation.
• Scripting experience with Python, Bash or similar languages.
• Experience working within Federal Government or highly regulated environments.
• Current NV1 Security Clearance. 

If this excites you, apply now, we'd love to hear from you!