- Location: Melbourne
- Contract Term: 3-6 months +
- Circa $720.00 per day including super
We are partnering with a leading enterprise organisation to engage an experienced Azure Security Logging Engineer to support the delivery of enterprise security logging and monitoring capabilities. This position will suit a hands-on security engineer with strong Microsoft Sentinel, Azure Log Analytics, and log collection experience across cloud, server, and network environments.
About the Role
You will play a key role in designing, implementing, and validating security logging solutions across a complex technology environment. Working between delivery teams, platform owners, and the Security Operations Centre (SOC), you will ensure security telemetry is collected, normalised, and available for effective monitoring and analysis.
The role requires someone who can combine deep technical knowledge with the ability to write clear, testable requirements and practical acceptance criteria.
Key Responsibilities
- Configure and manage Microsoft Sentinel and Azure Log Analytics workspaces.
- Develop Data Collection Rules, destination tables, and KQL queries.
- Implement log collection using Azure Monitor Agent, Azure Arc, Windows Event Forwarding, syslog, and CEF collectors.
- Configure and validate Windows logging, including audit policies and event channels.
- Configure Linux logging using auditd and rsyslog.
- Integrate logs from network devices, firewalls, and application delivery platforms.
- Work with technologies such as Cisco, Palo Alto, F5, or similar enterprise platforms.
- Write clear technical requirements with acceptance criteria that can be independently tested.
- Collaborate with delivery teams, platform owners, and SOC stakeholders.
- Troubleshoot logging gaps and support the validation of end-to-end log collection paths.
Skills & Experience
To be successful in this role, you will have:
- Strong hands-on experience with Microsoft Sentinel and Azure Log Analytics.
- Experience configuring Log Analytics workspaces, Data Collection Rules, and destination tables.
- Strong Kusto Query Language (KQL) capability.
- Practical experience with Azure Monitor Agent and Azure Arc.
- Experience with Windows Event Forwarding, syslog, and CEF collectors.
- Knowledge of Windows audit policies and event channels.
- Experience configuring Linux auditd and rsyslog.
- Experience integrating logs from network devices and firewalls, including Cisco, Palo Alto, F5, or comparable technologies.
- Demonstrated ability to write testable technical requirements and measurable acceptance criteria.
- Strong stakeholder engagement skills, with the ability to work across delivery, platform, and security operations teams.
Highly Regarded
- Exposure to Operational Technology or Industrial Control Systems environments.
- Understanding of Purdue Model segmentation and OT change windows.
- Experience with ASIM normalisation and parser development.
- Knowledge of Azure Policy, diagnostic settings, and Microsoft Defender for Cloud.
- Understanding of Australian energy and critical infrastructure requirements, including AESCSF and the SOCI Act.
- Familiarity with ASD ACSC logging guidance, Essential Eight, and IEC 62443.
- Experience using Confluence and Jira.
What’s on Offer?
- Opportunity to contribute to a significant security logging and monitoring initiative.
- Work across complex Azure, infrastructure, network, and security environments.
- Exposure to enterprise security operations and critical infrastructure environments.
- Collaborative engagement with platform, delivery, and SOC teams.
- Opportunity to apply specialist Microsoft Sentinel and log engineering expertise.
If you’re an experienced Azure Security Logging Engineer with strong Microsoft Sentinel, KQL, and enterprise log collection expertise, we’d love to hear from you.
Apply today or reach out for a confidential discussion:
Katrina Gabriel | 0489 923 756 | katrinag@whizdom.com.au
Candidates will need to be willing to undergo pre-employment screening checks, which may include ID and work rights verification, security clearance verification, and any other client-requested checks.
