SOC Security Engineer EDR

Security Engineer EDR

At Thales, we know technology has the ability to make our world more secure, sustainable, and inclusive – and that it's all driven by human intelligence.

Because it takes human intelligence to build and power the systems and solutions that people depend on every day. So we stay curious and make space for diverse points of view. We share what we know and we challenge what's possible.

From manufacturing and engineering to cybersecurity and space, we're driving progress in some of the world's most important industries – and working together to build a future we can all trust.

As a Security Engineer EDR, you will be a core part of our Security Operations Centre (SOC) team. You will be responsible for deploying, configuring and troubleshooting key Microsoft Defender and Crowdstrike Falcon technologies in client environments to detect, prevent, and respond to security incidents.

As a subject matter expert in Endpoint Detection Response, you will assist internal SOC teams with engineering queries and technical escalations, as well as building and maintaining relationships with clients.

This position can be based hybrid across any of our Melbourne, Canberra, Sydney or Brisbane office.

Some key accountabilities:

• Provide expertise in Microsoft Sentinel, Google SecOps and Defender technologies to internal and external stakeholders
• Perform maintenance of Tesserent deployed technologies within client environments
• Assist with the triage, response and escalation of client and internal engineering tickets
• Take ownership of projects to ensure they are completed to a high standard and in a timely manner
• Work collaboratively with other members of the SOC team to continually improve our security monitoring and response capabilities
• Create, follow, and maintain internal SOC documentation
• Continually update skills and knowledge relative to the ever-changing threat landscape

On day one you will come with:

• Minimum of 2-4+ years' experience in a Microsoft engineering or related role, with a focus on core security technologies
• Strong experience with Microsoft Sentinel or Microsoft Defender and CrowdStrike Falcon
• In-depth knowledge and experience with security tools and technologies, such as SIEM, and EDR
• In-depth knowledge of cybersecurity principles, methodologies, and technologies
• Relevant Microsoft certifications (i.e., SC-200, MS-500 and AZ-500)
• Experience working in a Security Operations Centre is an advantage

WE ENCOURAGE YOU TO APPLY

After you have applied, you will receive an email acknowledging your application. We'll then provide a personalised experience for suitable applicants as we progress the selection and assessment process. Prior to being offered employment, you will need to complete pre-employment police checks.

As a Defence security clearance is required for this role, applicants must be Australian citizens and eligible to obtain and maintain an appropriate clearance.