Senior Security Engineer - Tier 3

As a Senior Security Engineer - Tier 3 at Macquarie Technology Group, you’ll be tasked with leading the implementation of SOC Security Services, investigating cyber threats, and applying preventive measures. You'll also provide operational support for security infrastructure, manage system vulnerabilities, and develop reporting dashboards for security events. As the escalation point for Tier 3 issues, your expertise will ensure that government and customer systems are secure and efficient.

To be considered for the Senior Security Engineer - Tier 3 role, candidates should possess a degree in Computer Science, Cyber Security, or Network Engineering. Additionally, being an Australian citizen is required to obtain ASD Government security clearance. Ideally, applicants should have at least 5 years of experience in support roles, particularly with a focus on ISP and cybersecurity.

Essential skills for the Senior Security Engineer - Tier 3 position include a strong hands-on experience with major SIEM tools like Splunk, proficiency in Linux navigation, and a solid understanding of firewalls and network protocols. Familiarity with scripting languages like Bash, Python, or Ruby for task automation is also advantageous, alongside the ability to respond to security incidents effectively.

Absolutely! Macquarie Technology Group is committed to investing in your professional growth. In the role of Senior Security Engineer - Tier 3, you will have access to learning and development opportunities designed to accelerate your career. Additionally, our culture encourages internal mobility, allowing you to explore various career pathways within the organization.

The culture at Macquarie Technology Group is dynamic and collaborative, emphasizing teamwork and celebrating successes. As a Senior Security Engineer - Tier 3, you will be part of a supportive team that values smart thinking and innovation. You’ll be encouraged to share your insights and contribute to meaningful projects that make a difference.

When discussing your experience with SIEM tools, highlight specific instances where you've used tools like Splunk or Microsoft Sentinel. Provide examples of how you monitored security events, managed alerts, and conducted incident responses, showcasing your technical skills and problem-solving ability.

Your answer should demonstrate a methodical approach to incident response. Discuss the initial assessment of the incident, steps taken to contain it, the diagnostic procedures used, and how you communicated with your team. Emphasize the importance of documentation and post-incident reviews to improve future responses.

Reflect on specific vulnerabilities you've found, such as weak passwords or outdated software. Discuss how you identified these issues, the remediation steps you took, and the communication with stakeholders to ensure a comprehensive solution was in place to mitigate risks.

When explaining complex concepts, aim for clarity and relatability. Use analogies or simpler terms to break down technical jargon into digestible points. This not only showcases your communication skills but also your ability to make cybersecurity accessible for all.

List the scripting languages you are familiar with, such as Bash or Python. Provide examples of tasks you've automated, like log collection or vulnerability scanning, demonstrating how scripting has improved efficiency and accuracy in your previous roles.

Choose a specific project that highlights your skills in handling complexity. Discuss the objectives, challenges faced, your role in addressing those challenges, and the positive outcomes that resulted. Reflecting on lessons learned will also illustrate your growth and adaptability.

Highlight critical thinking and problem-solving as essential skills, emphasizing the need to analyze threats, assess risks, and develop effective strategies. You can also mention continuous learning, as the cybersecurity landscape is always evolving.

Your answer should align with Macquarie’s values and commitment to innovation. Discuss how you admire their culture of collaboration, their success in the industry, and how your personal values and career goals align with the opportunity to contribute to such impactful work.

Discuss your strategies for staying informed, such as following specific cybersecurity blogs, attending webinars, or participating in professional forums. Emphasize the importance of continuous education through certifications or training to keep skills sharp in the dynamic cybersecurity field.

Provide an overview of various types of threat actors, such as hacktivists, cybercriminals, and state-sponsored actors. Discuss how their tactics, techniques, and procedures (TTPs) can affect security measures and the importance of threat intelligence in proactively defending against these threats.