Security Information and Event Management Tester (AU Citizen with Security Clearance) - Sydney, NSW, Australia

About the Role

We are seeking a SIEM Tester to support the validation and assurance of Security Information and Event Management (SIEM) platforms, security monitoring use cases, and threat detection capabilities. The successful candidate will be responsible for testing security detection rules, log ingestion pipelines, alerts, dashboards, and reporting functionality across SIEM technologies such as Microsoft Sentinel, Splunk, IBM QRadar, or Elastic Security.

Key Responsibilities

• Develop and execute test plans, test cases, and test scripts for SIEM platforms.

• Validate log collection, parsing, normalization, and enrichment from various security and infrastructure sources.

• Test security use cases, detection rules, correlation searches, and alerting mechanisms.

• Perform functional, integration, regression, and user acceptance testing of SIEM solutions.

• Validate dashboards, reports, and threat-hunting queries.

• Simulate cyber attack scenarios and verify detection coverage and alert generation.

• Identify, document, and track defects through to resolution.

• Work with security engineers and developers to troubleshoot and resolve issues.

• Support deployment and release testing activities.

Required Skills & Experience

• Experience testing SIEM platforms such as:

  • Microsoft Sentinel

  • Splunk Enterprise Security

  • IBM QRadar

  • Elastic Security

• Understanding of cybersecurity concepts, including:

  • Security Operations Centre (SOC)

  • Incident Detection and Response

  • Threat Hunting

  • Vulnerability Management

  • MITRE ATT&CK Framework

• Security Clearance