Principal Security Engineer Cyber Advisor

Job details Cyber Advisors provide ICT security advice and assistance to government, including policy creation, project advice and assistance, and research. Key duties and responsibilities The Services, delivered in collaboration with and under supervision by nominated AFP personnel, include, but are not limited to, the following: Design and implement onboarding of log sources into the SIEM from cloud, on-premise, identity, endpoint, and network platforms Develop and maintain parsing, normalisation, and data quality standards for logs Build and maintain SOAR workflows to automate alert triage, enrichment, containment, and response Integrate SIEM and SOAR platforms with security and IT tooling including EDR, IAM, ticketing, email, firewall, and threat intelligence systems Develop, tune, and maintain high-quality detection rules aligned to threat detection capability, attacker techniques and organisational risk. Create and maintain SOC playbooks and operational runbooks mapped to a...